x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) 23:00:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}) dup2(r1, r0) 23:00:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}) dup2(r1, r0) [ 382.478942][T15619] user requested TSC rate below hardware speed [ 382.552340][T15627] user requested TSC rate below hardware speed 23:00:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080)) 23:00:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:24 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "c31c2b", 0x1c, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @mptcp=@generic={0x4, 0x6, '\x00\x00\x00\x00'}]}}}}}}}}, 0x0) 23:00:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}) dup2(r1, r0) 23:00:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}) dup2(r1, r0) 23:00:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, 0x0) [ 382.908328][T15735] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 382.927254][T15735] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 382.981765][T15727] user requested TSC rate below hardware speed 23:00:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}) dup2(r1, r0) 23:00:25 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) 23:00:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}) dup2(r1, r0) 23:00:25 executing program 0: r0 = socket$inet6(0xa, 0x20000000080002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 383.180396][T15763] user requested TSC rate below hardware speed 23:00:25 executing program 4: unshare(0x2040400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x5452, &(0x7f0000000080)={0x4d0}) 23:00:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000980)=[{&(0x7f00000005c0)="e5", 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x0, &(0x7f0000000100)=@abs, 0x930212) 23:00:25 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000000)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000000ac3ba70806055b6fdd8ca5969f2350b40000000090001000029ec2400020cd37e99d6", 0x4c}], 0x1}, 0x0) 23:00:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) utime(&(0x7f0000000080)='./file0/../file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 23:00:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[], 0xfff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:25 executing program 0: syz_usb_connect(0x0, 0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009fd0a08ac050086e8720000000109023a00010000000009040000000e0100000624060001de05240000000d240f0100000000000001800106241a00000004240200589a98c9650624070021140a98ae40c8c6688feadf98e4b4a9dea47ba263cf5b15553d7731423f04bbb2402b6ea738263d4e39f258627a393f4a7adb29221f9452b9baa40437f977d063436154000000000000000000"], 0x0) [ 383.547559][T15864] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 23:00:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0xfffffffffffffffd, 0x2) 23:00:25 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) r21 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:00:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2000000000000006, &(0x7f00000001c0)=0x0) close(r0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 383.708220][T15889] user requested TSC rate below hardware speed 23:00:25 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) read(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000090a000/0x4000)=nil, 0x4000}}) [ 383.891088][T15889] user requested TSC rate below hardware speed 23:00:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 23:00:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x9}) [ 384.002454][ T30] usb 1-1: new high-speed USB device number 14 using dummy_hcd 23:00:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[], 0xfff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 384.169620][T16022] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 384.214780][T16020] user requested TSC rate below hardware speed [ 384.245907][ T30] usb 1-1: Using ep0 maxpacket: 8 23:00:26 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0) 23:00:26 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) r21 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:00:26 executing program 5: unshare(0x2000400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) signalfd(r0, &(0x7f0000000000), 0x8) 23:00:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[], 0xfff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 384.365442][ T30] usb 1-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 384.375906][ T30] usb 1-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=72.e8 [ 384.385385][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.429622][ T30] usb 1-1: config 0 descriptor?? [ 384.487152][ T30] hub 1-1:0.0: ignoring external hub [ 384.571719][T16040] user requested TSC rate below hardware speed [ 384.712277][ T30] usb 1-1: string descriptor 0 read error: -71 [ 384.746032][ T30] usb 1-1: USB disconnect, device number 14 [ 385.442101][ T30] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 385.682076][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 385.832515][ T30] usb 1-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 385.842961][ T30] usb 1-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=72.e8 [ 385.852210][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.861567][ T30] usb 1-1: config 0 descriptor?? [ 385.903307][ T30] hub 1-1:0.0: ignoring external hub [ 386.142228][ T30] usb 1-1: string descriptor 0 read error: -71 [ 386.173093][ T30] usb 1-1: USB disconnect, device number 15 23:00:28 executing program 0: io_setup(0x6, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r0, 0x0, 0x0) io_cancel(r0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 23:00:28 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="24000000190001f0008000361731ed640adfa90100b70006000000cc08000f00fed70000", 0x24) 23:00:28 executing program 3: r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f00000000c0)=[{0x1, 0x0, 0x1000}, {0x0, 0x6}, {}], 0x3) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff}], 0x1) 23:00:28 executing program 5: unshare(0x8000400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x7, 0x3f, 0x0, 0xffffffffffffff9c}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000000c0)=0x1) 23:00:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[], 0xfff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:28 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) r21 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) [ 386.710536][T16153] user requested TSC rate below hardware speed 23:00:28 executing program 1: r0 = socket$inet6(0xa, 0x400000004805, 0x8) ioctl(r0, 0x801000008912, &(0x7f0000000340)="0a5c2d023c126285718070") socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) bind$inet(r1, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r1, 0x1, 0xd, &(0x7f0000000100)=0x8, 0x4) prctl$PR_SET_FP_MODE(0x2d, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000380)=""/127, &(0x7f0000000140)=0x7f) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="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", 0x132, 0x4007ffd, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 23:00:28 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x4}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x940) [ 386.759710][T16151] ion_buffer_destroy: buffer still mapped in the kernel 23:00:28 executing program 5: io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f00000000000000000000400500ef000000e7fc4b0900b80000000000b7871001000000000000002560b700eff0ffff0403ffffffff00000a"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000008601000000000000020040"]) 23:00:29 executing program 0: unshare(0x20400) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:00:29 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00009, 0x1, 0x0, 0x0, 0x2000000000002) socket$inet(0x2, 0x0, 0x0) dup(0xffffffffffffffff) 23:00:29 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:00:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0xa920, 0x2, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40000012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r6, r5, &(0x7f0000000040)=0x100000, 0x8001) 23:00:29 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x1000004d031, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) 23:00:29 executing program 0: lgetxattr(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="230103d0db31b032dbea1c8226b46f8c79af17f590c49890c0bbf80a9456731fb93167e586d8c25a7602a712925a289114"], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x8b, "7bef600f5c489544328013f37fed9f0358662e0bad191c350cca6242b5e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c50ad1671a812112aa72850a954cba528d15ada1142ee0d359897a7c6d8e913367bcc4b54a77a69b286a44664541b9ede7921bf5ee79511bfa9e2eabf38473fa9ab"}, 0x91) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r0) [ 387.350013][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 387.378644][T16301] x86/PAT: syz-executor.1:16301 map pfn RAM range req write-combining for [mem 0x1d20c0000-0x1d20c2fff], got write-back [ 387.434789][T16298] user requested TSC rate below hardware speed 23:00:29 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:00:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x0, r1) epoll_create1(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r5]}) r6 = dup2(r3, r5) dup3(r6, r4, 0x0) 23:00:29 executing program 1: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2aeb4800bb21a971, 0xffffffffffffffff, 0x0) 23:00:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x30, "73c0df66ccbdab996898757d482ed251d8589946943a1ef6b7785501b6c4b3351b6cca39aadd38d458a68c0eba09b1cd"}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x200000, 0x100}, 0x2c) [ 387.731297][T16298] user requested TSC rate below hardware speed 23:00:29 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:00:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@random={'security.', '\x00'}) 23:00:30 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00009, 0x1, 0x0, 0x0, 0x2000000000002) socket$inet(0x2, 0x0, 0x0) dup(0xffffffffffffffff) 23:00:30 executing program 0: lgetxattr(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="230103d0db31b032dbea1c8226b46f8c79af17f590c49890c0bbf80a9456731fb93167e586d8c25a7602a712925a289114"], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x8b, "7bef600f5c489544328013f37fed9f0358662e0bad191c350cca6242b5e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c50ad1671a812112aa72850a954cba528d15ada1142ee0d359897a7c6d8e913367bcc4b54a77a69b286a44664541b9ede7921bf5ee79511bfa9e2eabf38473fa9ab"}, 0x91) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x0, r1) epoll_create1(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r5]}) r6 = dup2(r3, r5) dup3(r6, r4, 0x0) 23:00:30 executing program 1: ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f00000002c0)="19") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:00:30 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x11a}}, @ip_tos_int={{0x14}}], 0x30}, 0x0) 23:00:30 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 388.960615][T16542] user requested TSC rate below hardware speed [ 388.975349][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 388.978468][T16547] user requested TSC rate below hardware speed [ 388.982359][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:00:31 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_eee={0x1e}}) 23:00:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x0, r1) epoll_create1(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r5]}) r6 = dup2(r3, r5) dup3(r6, r4, 0x0) 23:00:31 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)="dd", 0x1}], 0x1) 23:00:31 executing program 0: lgetxattr(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="230103d0db31b032dbea1c8226b46f8c79af17f590c49890c0bbf80a9456731fb93167e586d8c25a7602a712925a289114"], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x8b, "7bef600f5c489544328013f37fed9f0358662e0bad191c350cca6242b5e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c50ad1671a812112aa72850a954cba528d15ada1142ee0d359897a7c6d8e913367bcc4b54a77a69b286a44664541b9ede7921bf5ee79511bfa9e2eabf38473fa9ab"}, 0x91) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:00:31 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f0000000280)=""/98, 0x62}], 0x2}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020b000007000000000021003f54036205001a00f50b9aa24dd520175e3b8f8886264fe600081000e0880000004ee2ba575d64e2a597f3c5040069a1920a6597b0401003dabb22b27ebf770727afa8ec1543ae874078ea69213dedfb94dd9401a59e886b1ecc921dbb707f91ae8a9398dc3ec1b5fa08fb8e00"/131], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000581, 0x0) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) [ 389.576676][T16675] user requested TSC rate below hardware speed 23:00:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) epoll_create1(0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x0, r1) epoll_create1(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r5]}) r6 = dup2(r3, r5) dup3(r6, r4, 0x0) 23:00:32 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:00:32 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x100000000000012, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x6, @random="fe71e19bcb81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:00:32 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x80000000012, r2, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000001c0)=0x7, 0x8000, 0x0) process_vm_writev(r0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/247, 0xfffffdb2}], 0x100000000000007b, &(0x7f0000000040), 0x23a, 0x0) 23:00:32 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00009, 0x1, 0x0, 0x0, 0x2000000000002) socket$inet(0x2, 0x0, 0x0) dup(0xffffffffffffffff) 23:00:32 executing program 0: lgetxattr(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="230103d0db31b032dbea1c8226b46f8c79af17f590c49890c0bbf80a9456731fb93167e586d8c25a7602a712925a289114"], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x8b, "7bef600f5c489544328013f37fed9f0358662e0bad191c350cca6242b5e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c50ad1671a812112aa72850a954cba528d15ada1142ee0d359897a7c6d8e913367bcc4b54a77a69b286a44664541b9ede7921bf5ee79511bfa9e2eabf38473fa9ab"}, 0x91) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:32 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x90581f, 0x10012, r0, 0x81000000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 390.206026][T16800] user requested TSC rate below hardware speed 23:00:32 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) [ 390.435301][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd 23:00:32 executing program 0: r0 = inotify_init1(0x0) r1 = getpid() capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000580)) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, 0xffffffffffffffff, 0x0) 23:00:32 executing program 1: ioprio_get$uid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x2000, &(0x7f000059d000/0x2000)=nil}) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000080)) [ 390.598398][T16904] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 23:00:32 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:00:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x15}}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0x1da, &(0x7f000000cf3d)=""/195}, 0x48) [ 390.722385][ T30] usb 6-1: Using ep0 maxpacket: 8 23:00:32 executing program 0: madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0xf) [ 390.862450][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 390.872499][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 390.882465][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 390.896110][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 390.905391][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.507185][ T30] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 391.686681][T16925] user requested TSC rate below hardware speed [ 391.706916][ T30] usb 6-1: USB disconnect, device number 2 [ 391.719403][ T30] usblp0: removed 23:00:34 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00009, 0x1, 0x0, 0x0, 0x2000000000002) socket$inet(0x2, 0x0, 0x0) dup(0xffffffffffffffff) 23:00:34 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xae, 0xd9, 0x30, 0x8, 0x1608, 0x30b, 0xd7a3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x86, 0x0, 0x2, 0x8, 0xcd, 0x4a, 0x0, [], [{{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0) 23:00:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x15}}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0x1da, &(0x7f000000cf3d)=""/195}, 0x48) 23:00:34 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) [ 392.472450][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 392.702886][T11340] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 392.733649][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 392.862591][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 392.872510][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 392.882602][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 392.896380][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 392.905585][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.943570][T11340] usb 1-1: Using ep0 maxpacket: 8 [ 393.062897][T11340] usb 1-1: config 0 has an invalid interface number: 134 but max is 0 [ 393.071227][T11340] usb 1-1: config 0 has no interface number 0 [ 393.077564][T11340] usb 1-1: config 0 interface 134 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 393.087626][T11340] usb 1-1: config 0 interface 134 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 393.097962][T11340] usb 1-1: New USB device found, idVendor=1608, idProduct=030b, bcdDevice=d7.a3 [ 393.107185][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.117812][T11340] usb 1-1: config 0 descriptor?? [ 393.164892][T11340] io_ti 1-1:0.134: required endpoints missing [ 393.261515][T17162] user requested TSC rate below hardware speed 23:00:35 executing program 5: mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8001, &(0x7f0000c28000)=0x800003f, 0xf1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) 23:00:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x15}}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0x1da, &(0x7f000000cf3d)=""/195}, 0x48) 23:00:35 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) [ 393.315669][ T30] usblp: can't set desired altsetting 0 on interface 0 [ 393.343543][ T30] usb 6-1: USB disconnect, device number 3 [ 393.369180][T11340] usb 1-1: USB disconnect, device number 16 23:00:35 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) unshare(0x2000400) fallocate(r0, 0x0, 0x0, 0x800000000000000) 23:00:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x15}}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0x1da, &(0x7f000000cf3d)=""/195}, 0x48) 23:00:36 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x9, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 23:00:36 executing program 1: ioprio_get$uid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x2000, &(0x7f000059d000/0x2000)=nil}) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000080)) 23:00:36 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) [ 394.163821][T11340] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 394.402062][T11340] usb 1-1: Using ep0 maxpacket: 8 [ 394.522553][T11340] usb 1-1: config 0 has an invalid interface number: 134 but max is 0 [ 394.530878][T11340] usb 1-1: config 0 has no interface number 0 [ 394.537349][T11340] usb 1-1: config 0 interface 134 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 394.547366][T11340] usb 1-1: config 0 interface 134 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 394.557537][T11340] usb 1-1: New USB device found, idVendor=1608, idProduct=030b, bcdDevice=d7.a3 [ 394.566736][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:00:36 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x10}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @dev}, "810000202a011256"}}}}}, 0x0) [ 394.673713][T11340] usb 1-1: config 0 descriptor?? [ 394.714870][T11340] io_ti 1-1:0.134: required endpoints missing [ 394.840885][T17320] user requested TSC rate below hardware speed [ 394.918198][T11340] usb 1-1: USB disconnect, device number 17 23:00:37 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000018b7c540c215340065d20000000109021b000100000000090400000145e54f00090584033e330fae63e7238511c5373cf1000000"], 0x0) 23:00:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x3}) 23:00:37 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) r18 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:00:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 23:00:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f00000001c0)='posix_acl_access*selfvmnet0\\mime_type:\xe1mime_typevboxnet0]\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="df", 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x2, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) 23:00:37 executing program 1: ioprio_get$uid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x2000, &(0x7f000059d000/0x2000)=nil}) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000080)) 23:00:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_sl\tve\x00'}, {0xc, 0x5, [@IFLA_BRPORT_PROXYARP={0x8}]}}}]}, 0x44}}, 0x0) 23:00:37 executing program 3: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000040)={0x3}) 23:00:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="e8", 0x1}], 0x1, &(0x7f0000000740)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @sndinfo={0x20}], 0x38}, 0x0) [ 395.706999][T17459] netlink: 'syz-executor.4': attribute type 10 has an invalid length. 23:00:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)) [ 395.792317][T11340] usb 1-1: new high-speed USB device number 18 using dummy_hcd 23:00:37 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) r18 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:00:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="e8", 0x1}], 0x1, &(0x7f0000000740)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @sndinfo={0x20}], 0x38}, 0x0) [ 396.152617][T11340] usb 1-1: New USB device found, idVendor=15c2, idProduct=0034, bcdDevice=d2.65 [ 396.161778][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.173845][T11340] usb 1-1: config 0 descriptor?? [ 396.217774][T11340] input: iMON Panel, Knob and Mouse(15c2:0034) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 396.401188][T17410] user requested TSC rate below hardware speed [ 396.432300][T11340] imon:send_packet: packet tx failed (-71) [ 396.452664][T11340] imon 1-1:0.0: panel buttons/knobs setup failed [ 396.459208][T11340] Registered IR keymap rc-imon-pad [ 396.475521][T11340] imon:send_packet: packet tx failed (-71) [ 396.493415][T11340] imon 1-1:0.0: remote input dev register failed [ 396.500159][T11340] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 396.653560][T11340] imon 1-1:0.0: unable to initialize intf0, err 0 [ 396.660066][T11340] imon:imon_probe: failed to initialize context! [ 396.666713][T11340] imon 1-1:0.0: unable to register, err -19 [ 396.692601][T11340] usb 1-1: USB disconnect, device number 18 [ 397.182147][T11340] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 397.542412][T11340] usb 1-1: New USB device found, idVendor=15c2, idProduct=0034, bcdDevice=d2.65 [ 397.551548][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.561267][T11340] usb 1-1: config 0 descriptor?? [ 397.607557][T11340] input: iMON Panel, Knob and Mouse(15c2:0034) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 397.822214][T11340] imon:send_packet: packet tx failed (-71) [ 397.842399][T11340] imon 1-1:0.0: panel buttons/knobs setup failed [ 397.849088][T11340] Registered IR keymap rc-imon-pad [ 397.862524][T11340] imon:send_packet: packet tx failed (-71) [ 397.882933][T11340] imon 1-1:0.0: remote input dev register failed [ 397.889544][T11340] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 398.102297][T11340] imon 1-1:0.0: unable to initialize intf0, err 0 [ 398.109263][T11340] imon:imon_probe: failed to initialize context! [ 398.115926][T11340] imon 1-1:0.0: unable to register, err -19 [ 398.126204][T11340] usb 1-1: USB disconnect, device number 19 23:00:40 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000018b7c540c215340065d20000000109021b000100000000090400000145e54f00090584033e330fae63e7238511c5373cf1000000"], 0x0) 23:00:40 executing program 3: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000040)={0x3}) 23:00:40 executing program 4: unshare(0x20400) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000600)) 23:00:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="e8", 0x1}], 0x1, &(0x7f0000000740)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @sndinfo={0x20}], 0x38}, 0x0) 23:00:40 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) r18 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:00:40 executing program 1: ioprio_get$uid(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x875c}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x2000, &(0x7f000059d000/0x2000)=nil}) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000080)) 23:00:40 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="e8", 0x1}], 0x1, &(0x7f0000000740)=[@prinfo={0x18, 0x84, 0x5, {0x20}}, @sndinfo={0x20}], 0x38}, 0x0) 23:00:40 executing program 3: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000040)={0x3}) 23:00:40 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0xe42821a6f81bd540, 0x0) [ 398.704319][T11340] usb 1-1: new high-speed USB device number 20 using dummy_hcd 23:00:40 executing program 5: unshare(0x600) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4020940d) 23:00:40 executing program 3: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000040)={0x3}) 23:00:40 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r16, r15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) [ 399.124561][T11340] usb 1-1: New USB device found, idVendor=15c2, idProduct=0034, bcdDevice=d2.65 [ 399.134195][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.190602][T11340] usb 1-1: config 0 descriptor?? [ 399.260492][T11340] input: iMON Panel, Knob and Mouse(15c2:0034) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 399.425895][T17657] user requested TSC rate below hardware speed [ 399.472777][T11340] imon:send_packet: packet tx failed (-71) [ 399.492342][T11340] imon 1-1:0.0: panel buttons/knobs setup failed [ 399.499095][T11340] Registered IR keymap rc-imon-pad [ 399.522465][T11340] imon:send_packet: packet tx failed (-71) [ 399.552404][T11340] imon 1-1:0.0: remote input dev register failed [ 399.559188][T11340] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 399.675753][T11340] imon 1-1:0.0: unable to initialize intf0, err 0 [ 399.682827][T11340] imon:imon_probe: failed to initialize context! [ 399.689295][T11340] imon 1-1:0.0: unable to register, err -19 [ 399.703082][T11340] usb 1-1: USB disconnect, device number 20 23:00:42 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000018b7c540c215340065d20000000109021b000100000000090400000145e54f00090584033e330fae63e7238511c5373cf1000000"], 0x0) 23:00:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f000000bfd4)={0x1, 0x6, 0x2, 0x20000000000001}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000100)='/', 0x0}, 0x20) 23:00:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)) dup(r6) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:00:42 executing program 5: unshare(0x600) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4020940d) 23:00:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r16, r15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:00:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0xff00, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x305}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r2, 0x5, 0x1, [0x4]}, 0xa) 23:00:42 executing program 5: unshare(0x600) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4020940d) [ 400.080468][T17910] user requested TSC rate below hardware speed 23:00:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x10881, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x80000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0/file0\x00', 0x40, 0x0) [ 400.312144][T11340] usb 1-1: new high-speed USB device number 21 using dummy_hcd 23:00:42 executing program 5: unshare(0x600) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4020940d) 23:00:42 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000002, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 23:00:42 executing program 1: unshare(0x40400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140), 0x0) 23:00:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r16, r15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) [ 400.692650][T11340] usb 1-1: New USB device found, idVendor=15c2, idProduct=0034, bcdDevice=d2.65 [ 400.701820][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.731083][T11340] usb 1-1: config 0 descriptor?? [ 400.781214][T11340] input: iMON Panel, Knob and Mouse(15c2:0034) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 400.992203][T11340] imon:send_packet: packet tx failed (-71) [ 401.012231][T11340] imon 1-1:0.0: panel buttons/knobs setup failed [ 401.019254][T11340] Registered IR keymap rc-imon-pad [ 401.032447][T11340] imon:send_packet: packet tx failed (-71) [ 401.054864][T11340] imon 1-1:0.0: remote input dev register failed [ 401.061632][T11340] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 401.192584][T11340] imon 1-1:0.0: unable to initialize intf0, err 0 [ 401.199247][T11340] imon:imon_probe: failed to initialize context! [ 401.205859][T11340] imon 1-1:0.0: unable to register, err -19 [ 401.215675][T11340] usb 1-1: USB disconnect, device number 21 23:00:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x4000000000014, &(0x7f0000000040)) ptrace(0x10, r2) ptrace$getsig(0x5, r2, 0x7ffffb, 0x0) 23:00:43 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0xc, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1bd93211"}, 0x0, 0x0, @fd, 0x4}) 23:00:43 executing program 1: process_vm_writev(0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x1ec, 0x0) 23:00:43 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r17, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) 23:00:43 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000018b7c540c215340065d20000000109021b000100000000090400000145e54f00090584033e330fae63e7238511c5373cf1000000"], 0x0) 23:00:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) 23:00:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) dup3(r0, r1, 0x0) [ 401.882372][T11340] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 402.252309][T11340] usb 1-1: New USB device found, idVendor=15c2, idProduct=0034, bcdDevice=d2.65 [ 402.261563][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.272010][T11340] usb 1-1: config 0 descriptor?? [ 402.318117][T11340] input: iMON Panel, Knob and Mouse(15c2:0034) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 402.532318][T11340] imon:send_packet: packet tx failed (-71) [ 402.552349][T11340] imon 1-1:0.0: panel buttons/knobs setup failed [ 402.558926][T11340] Registered IR keymap rc-imon-pad [ 402.572390][T11340] imon:send_packet: packet tx failed (-71) [ 402.592420][T11340] imon 1-1:0.0: remote input dev register failed [ 402.598976][T11340] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 402.772222][T11340] imon 1-1:0.0: unable to initialize intf0, err 0 [ 402.778869][T11340] imon:imon_probe: failed to initialize context! [ 402.785653][T11340] imon 1-1:0.0: unable to register, err -19 [ 402.794908][T11340] usb 1-1: USB disconnect, device number 22 23:00:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b80)=@ipv6_getroute={0x38, 0x1a, 0x401, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @local}, @RTA_OIF={0x8}]}, 0x38}}, 0x0) 23:00:45 executing program 3: syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00\x00\x00\xf8\xff\xff\xff\xff\xff\xff\xff\x00'}, &(0x7f0000000080)=0x1e) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) 23:00:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r17, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) 23:00:45 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#0\n'], 0x3) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:00:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x10881, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x80000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0/file0\x00', 0x40, 0x0) 23:00:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffff7f}]}}]}, 0x38}}, 0x0) 23:00:45 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#0\n'], 0x3) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:00:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x10881, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x80000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0/file0\x00', 0x40, 0x0) 23:00:45 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000001140)=""/4096}, 0x20) 23:00:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x46}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:00:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000300), 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bc0b13c0000000000000000000000000000000000000000000000000000000000000000000300"/112], 0xb8}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000002c0), 0x8) 23:00:45 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#0\n'], 0x3) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:00:45 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x10881, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x80000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0/file0\x00', 0x40, 0x0) 23:00:45 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#0\n'], 0x3) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 403.798675][T18426] input: syz0 as /devices/virtual/input/input20 23:00:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r17, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) 23:00:45 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000000000000001"]) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd05969341", 0x6}], 0x1000000000000006, 0x0) 23:00:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000300), 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bc0b13c0000000000000000000000000000000000000000000000000000000000000000000300"/112], 0xb8}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000002c0), 0x8) 23:00:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x46}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:00:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x3a) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x20400000, 0x115) 23:00:46 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001080)=@newqdisc={0x148, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, r4, {0xfff2}}}, 0x24}}, 0x0) [ 404.254943][T18487] input: syz0 as /devices/virtual/input/input22 23:00:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000300), 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bc0b13c0000000000000000000000000000000000000000000000000000000000000000000300"/112], 0xb8}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000002c0), 0x8) 23:00:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000001880)="580000001400192340834b80040d8c5602067fffffff81000000000000dca870410cc00000cf64009400058915509da8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 23:00:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x46}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:00:46 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="c2ef8e8df54263", 0x7}], 0x1) close(r2) r3 = socket(0x2, 0x1000000000000002, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x68042, 0x0) write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x2b) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000000)=0xff, 0x4) fallocate(r4, 0x0, 0xffff, 0x9) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r3, r4, 0x0, 0x10001) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 23:00:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000100), 0x10) 23:00:46 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) r15 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) [ 404.559699][T18572] input: syz0 as /devices/virtual/input/input23 23:00:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000300), 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bc0b13c0000000000000000000000000000000000000000000000000000000000000000000300"/112], 0xb8}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000002c0), 0x8) [ 404.708706][T18583] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:00:46 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, '\x00\x00ien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00', 0x0, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) 23:00:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000480)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffb}}) 23:00:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x46}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) 23:00:47 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)="11dca5055e0bcfe47b") r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f00000002c0)=""/83, 0xfffffffffffffcd0, 0x0) 23:00:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000001880)="580000001400192340834b80040d8c5602067fffffff81000000000000dca870410cc00000cf64009400058915509da8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 404.978537][T18648] input: syz0 as /devices/virtual/input/input24 23:00:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 23:00:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x80, @local, 0x6}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x8000}], 0x48) writev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8240200005a90", 0xa}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b2", 0x23}], 0x2) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 23:00:47 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080)="d8b1c505fce23d55", 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040), 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080)="d8b1c505fce23d55", 0x8) [ 405.282665][T18713] user requested TSC rate below hardware speed 23:00:47 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) r15 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:00:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) [ 405.334523][T18713] user requested TSC rate below hardware speed 23:00:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00\x00\x00\x00\x00\xdb\x88yt\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\ah1\x03\xcfHQo\xd9`c`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x89\xd6\xa5\xd8n\xeao\xc6j\xdcl\x927\x8dI', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/138, 0x8a) getdents64(r1, 0x0, 0x1f990707652ec3be) 23:00:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000001880)="580000001400192340834b80040d8c5602067fffffff81000000000000dca870410cc00000cf64009400058915509da8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 405.492180][T18726] loop_set_block_size: loop0 () has still dirty pages (nrpages=32) 23:00:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00\x00Z\x00', @ifru_ivalue=0x20b17d7b}) 23:00:47 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000de3000)={{0x4000001ff, 0xa}}) 23:00:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x7b, 0x0, [0x4b564d02, 0x0, 0xc0010015]}) 23:00:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00\x00Z\x00', @ifru_ivalue=0x20b17d7b}) 23:00:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x80, @local, 0x6}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x8000}], 0x48) writev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8240200005a90", 0xa}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b2", 0x23}], 0x2) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) [ 405.896528][T18830] user requested TSC rate below hardware speed 23:00:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x80, @local, 0x6}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x8000}], 0x48) writev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8240200005a90", 0xa}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b2", 0x23}], 0x2) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 23:00:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000001880)="580000001400192340834b80040d8c5602067fffffff81000000000000dca870410cc00000cf64009400058915509da8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 23:00:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00\x00Z\x00', @ifru_ivalue=0x20b17d7b}) 23:00:48 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) r15 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) [ 405.997938][T18856] user requested TSC rate below hardware speed 23:00:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:00:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00\x00Z\x00', @ifru_ivalue=0x20b17d7b}) 23:00:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x80, @local, 0x6}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x8000}], 0x48) writev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8240200005a90", 0xa}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b2", 0x23}], 0x2) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 23:00:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x80, @local, 0x6}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x8000}], 0x48) writev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8240200005a90", 0xa}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b2", 0x23}], 0x2) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 23:00:48 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 23:00:48 executing program 1: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 23:00:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:00:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x80, @local, 0x6}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x8000}], 0x48) writev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8240200005a90", 0xa}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b2", 0x23}], 0x2) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 23:00:48 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xff33}, 0x0) 23:00:48 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r17, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) [ 406.882065][T11397] usb 4-1: new high-speed USB device number 16 using dummy_hcd 23:00:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:00:49 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') preadv(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x80, @local, 0x6}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0x8000}], 0x48) writev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="ae88bff8240200005a90", 0xa}, {&(0x7f0000000280)="aa04484ed0e5910aa84d4577670e12d9fc56c9953fbd806371162abf7ca71e023a27b2", 0x23}], 0x2) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 23:00:49 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000640)="580000001400ad818d5356e9d3c203a0def1c971fb764e605e71d3ecf46ef2226b8e27897226e4f494511b76c803f82379d50f6962aba4efcbe2ad0c7acde01c043183d3406f209eac2127bfd9de295410074862a8ac158b", 0x58}], 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 407.032415][T19018] loop_set_block_size: loop0 () has still dirty pages (nrpages=15) 23:00:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 407.243037][T11397] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 407.251328][T11397] usb 4-1: config 0 has no interface number 0 [ 407.257661][T11397] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 407.266948][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:00:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x41c1, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10029, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x12) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) dup3(r3, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) dup3(r5, r6, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 407.341512][T11397] usb 4-1: config 0 descriptor?? 23:00:49 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r17, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) [ 407.430935][T11397] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 407.812215][T11397] gspca_stk1135: reg_w 0x0 err -71 [ 407.818712][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 407.825227][T11397] gspca_stk1135: Sensor write failed [ 407.830608][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 407.839043][T11397] gspca_stk1135: Sensor write failed [ 407.844543][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 407.850916][T11397] gspca_stk1135: Sensor read failed [ 407.856734][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 407.863226][T11397] gspca_stk1135: Sensor read failed [ 407.868475][T11397] gspca_stk1135: Detected sensor type unknown (0x0) [ 407.875387][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 407.881761][T11397] gspca_stk1135: Sensor read failed [ 407.887235][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 407.893685][T11397] gspca_stk1135: Sensor read failed [ 407.899136][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 407.905846][T11397] gspca_stk1135: Sensor write failed [ 407.911199][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 407.917633][T11397] gspca_stk1135: Sensor write failed [ 407.923166][T11397] stk1135: probe of 4-1:0.28 failed with error -71 [ 407.932041][T11397] usb 4-1: USB disconnect, device number 16 [ 408.562037][T11340] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 408.922258][T11340] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 408.930544][T11340] usb 4-1: config 0 has no interface number 0 [ 408.936989][T11340] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 408.946180][T11340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.955660][T11340] usb 4-1: config 0 descriptor?? [ 408.996896][T11340] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 409.202302][T11340] gspca_stk1135: reg_w 0x2 err -71 [ 409.208591][T11340] gspca_stk1135: serial bus timeout: status=0x00 [ 409.216090][T11340] gspca_stk1135: Sensor write failed [ 409.221464][T11340] gspca_stk1135: serial bus timeout: status=0x00 [ 409.228055][T11340] gspca_stk1135: Sensor write failed [ 409.233487][T11340] gspca_stk1135: serial bus timeout: status=0x00 [ 409.239819][T11340] gspca_stk1135: Sensor read failed [ 409.245249][T11340] gspca_stk1135: serial bus timeout: status=0x00 [ 409.251602][T11340] gspca_stk1135: Sensor read failed [ 409.256938][T11340] gspca_stk1135: Detected sensor type unknown (0x0) [ 409.263796][T11340] gspca_stk1135: serial bus timeout: status=0x00 [ 409.270270][T11340] gspca_stk1135: Sensor read failed [ 409.275786][T11340] gspca_stk1135: serial bus timeout: status=0x00 [ 409.282273][T11340] gspca_stk1135: Sensor read failed [ 409.287699][T11340] gspca_stk1135: serial bus timeout: status=0x00 [ 409.294166][T11340] gspca_stk1135: Sensor write failed [ 409.299691][T11340] gspca_stk1135: serial bus timeout: status=0x00 [ 409.306191][T11340] gspca_stk1135: Sensor write failed [ 409.311785][T11340] stk1135: probe of 4-1:0.28 failed with error -71 [ 409.322714][T11340] usb 4-1: USB disconnect, device number 17 23:00:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 23:00:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0xffffffffffffffe6, 0x0, 0x49f}}], 0x40000000000019c, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') preadv(r0, &(0x7f00000017c0), 0x1b1, 0x0) 23:00:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @multicast1}, 0xc) capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) setsockopt$inet_mreqn(r1, 0x0, 0x13, &(0x7f00000000c0)={@broadcast, @local}, 0x154) 23:00:51 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0xb, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:00:51 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000080)=@isdn={0x22, 0x0, 0x0, 0x0, 0x6}, 0x80) 23:00:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r17, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) [ 409.716493][T19249] user requested TSC rate below hardware speed 23:00:51 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000002, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x8a, &(0x7f0000000200)={@local, @random="192bce5e2ffb", [], {@ipv6={0x86dd, {0x0, 0x6, "1000", 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "00000080800000004000000001000080"}, @sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 23:00:51 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000080)=@isdn={0x22, 0x0, 0x0, 0x0, 0x6}, 0x80) 23:00:52 executing program 0: r0 = socket$kcm(0x10, 0x200000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e000000110081aee405d10200000e00fa076b000a00000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0x2e}], 0x1}, 0x0) [ 410.121121][T19269] user requested TSC rate below hardware speed [ 410.137087][T11397] usb 4-1: new high-speed USB device number 18 using dummy_hcd 23:00:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000080)=@isdn={0x22, 0x0, 0x0, 0x0, 0x6}, 0x80) 23:00:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0xffffffffffffffe6, 0x0, 0x49f}}], 0x40000000000019c, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') preadv(r0, &(0x7f00000017c0), 0x1b1, 0x0) [ 410.280233][T19311] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. 23:00:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_set$pid(0x1, 0x0, 0x200007e35) clone(0x20008579, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 410.682407][T11397] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 410.690608][T11397] usb 4-1: config 0 has no interface number 0 [ 410.697555][T11397] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 410.707827][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.717321][T11397] usb 4-1: config 0 descriptor?? [ 410.767029][T11397] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 411.202341][T11397] gspca_stk1135: reg_w 0x0 err -71 [ 411.208621][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 411.215508][T11397] gspca_stk1135: Sensor write failed [ 411.221087][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 411.227547][T11397] gspca_stk1135: Sensor write failed [ 411.233003][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 411.239372][T11397] gspca_stk1135: Sensor read failed [ 411.244738][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 411.254805][T11397] gspca_stk1135: Sensor read failed [ 411.260060][T11397] gspca_stk1135: Detected sensor type unknown (0x0) [ 411.266859][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 411.273328][T11397] gspca_stk1135: Sensor read failed [ 411.278590][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 411.285040][T11397] gspca_stk1135: Sensor read failed [ 411.290313][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 411.298208][T11397] gspca_stk1135: Sensor write failed [ 411.303688][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 411.310039][T11397] gspca_stk1135: Sensor write failed [ 411.315696][T11397] stk1135: probe of 4-1:0.28 failed with error -71 [ 411.325035][T11397] usb 4-1: USB disconnect, device number 18 23:00:53 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 23:00:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0xffffffffffffffe6, 0x0, 0x49f}}], 0x40000000000019c, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') preadv(r0, &(0x7f00000017c0), 0x1b1, 0x0) 23:00:53 executing program 0: syz_usb_connect$uac1(0x0, 0xa8, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x0, 0x0, 0x6}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:00:53 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:00:53 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000080)=@isdn={0x22, 0x0, 0x0, 0x0, 0x6}, 0x80) 23:00:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f000031e000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) 23:00:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, '\xa3\x99\xe9\xc5X\x00\x00\x04\x00\x00\x00\x00\x00\xf0u1\xdcaP\xde\xfa\xcan\xdd\xaf\x1b\x8b\x8c6\x18L\x8f\x01;\xe9n\xa3\x1e\xfb\xd2\x9c\xa9\xb9\xd7'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'eS\x97\xebJ\x90\xdc\rK\xbdt0\xf3\xaaP\xc6\xa1zL\xbeF\xf9\xa2\x7fg\x1d\x17\x1cJ$P\xf2\x88I9)\xc1\xe0\xfe\x94h\xa5\xebUeT\xa2\x80;%P.\xf5\xbcE\r_X\xf2\x8b\x16\xe1\x19\x8d', 0x0, 0x0, [], [0x2, 0x1, 0x80000001, 0x5]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:00:53 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/246) r2 = epoll_create(0xab7f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x81}) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 23:00:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000002c0)=@ipx, 0xffffffffffffffe6, 0x0, 0x49f}}], 0x40000000000019c, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') preadv(r0, &(0x7f00000017c0), 0x1b1, 0x0) 23:00:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000080)=[{0x0, 0x2}, {}], 0x2) semop(r1, &(0x7f0000000000)=[{0x2}, {0x0, 0xffffffff}], 0x2) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0x20}], 0x1, 0x0) [ 412.032601][T11340] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 412.102771][T11397] usb 4-1: new high-speed USB device number 19 using dummy_hcd 23:00:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:00:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4000201f, 0x3f000002}) close(r1) [ 412.393017][T11340] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 412.404209][T11340] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.490706][T19565] vivid-000: kernel_thread() failed [ 412.582427][T11340] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.591682][T11340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.600660][T11340] usb 1-1: Product: syz [ 412.604963][T11340] usb 1-1: Manufacturer: syz [ 412.609735][T11340] usb 1-1: SerialNumber: syz [ 412.652376][T11397] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 412.660601][T11397] usb 4-1: config 0 has no interface number 0 [ 412.666930][T11397] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 412.676238][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.686102][T11397] usb 4-1: config 0 descriptor?? [ 412.736917][T11397] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 412.952293][T11340] usb 1-1: unit 0 not found! [ 412.984765][T11340] usb 1-1: USB disconnect, device number 23 [ 413.162684][T11397] gspca_stk1135: reg_w 0x0 err -71 [ 413.168949][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 413.175575][T11397] gspca_stk1135: Sensor write failed [ 413.180960][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 413.187499][T11397] gspca_stk1135: Sensor write failed [ 413.192958][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 413.199309][T11397] gspca_stk1135: Sensor read failed [ 413.204737][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 413.211289][T11397] gspca_stk1135: Sensor read failed [ 413.217610][T11397] gspca_stk1135: Detected sensor type unknown (0x0) [ 413.224439][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 413.230941][T11397] gspca_stk1135: Sensor read failed [ 413.236359][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 413.242947][T11397] gspca_stk1135: Sensor read failed [ 413.248251][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 413.254670][T11397] gspca_stk1135: Sensor write failed [ 413.260051][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 413.266603][T11397] gspca_stk1135: Sensor write failed [ 413.272206][T11397] stk1135: probe of 4-1:0.28 failed with error -71 [ 413.281455][T11397] usb 4-1: USB disconnect, device number 19 23:00:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 413.622192][ T30] usb 1-1: new high-speed USB device number 24 using dummy_hcd 23:00:55 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x16) [ 413.974143][T11397] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 413.982541][ T30] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 413.993832][ T30] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.162426][ T30] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.171612][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.180077][ T30] usb 1-1: Product: syz [ 414.184401][ T30] usb 1-1: Manufacturer: syz [ 414.190069][ T30] usb 1-1: SerialNumber: syz [ 414.362360][T11397] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 414.370824][T11397] usb 4-1: config 0 has no interface number 0 [ 414.377464][T11397] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 414.386674][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.396388][T11397] usb 4-1: config 0 descriptor?? [ 414.440156][T11397] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 414.532371][ T30] usb 1-1: unit 0 not found! [ 414.552621][ T30] usb 1-1: USB disconnect, device number 24 23:00:56 executing program 0: syz_usb_connect$uac1(0x0, 0xa8, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x0, 0x0, 0x6}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:00:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x0, 0x0) dup2(r1, r3) 23:00:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) dup2(r0, r1) 23:00:56 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:00:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc008561c, &(0x7f0000000240)={0xf0f000, 0xe7}) 23:00:56 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 23:00:56 executing program 5: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd000000090001000a0c0c00fcff0000040e05a5", 0x58}], 0x1) [ 414.864537][T11397] gspca_stk1135: reg_w 0x0 err -71 [ 414.871674][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 414.878164][T11397] gspca_stk1135: Sensor write failed [ 414.883786][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 414.890163][T11397] gspca_stk1135: Sensor write failed [ 414.895724][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 414.902162][T11397] gspca_stk1135: Sensor read failed [ 414.907459][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 414.913926][T11397] gspca_stk1135: Sensor read failed [ 414.919204][T11397] gspca_stk1135: Detected sensor type unknown (0x0) [ 414.925958][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 414.932409][T11397] gspca_stk1135: Sensor read failed [ 414.937723][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 414.944151][T11397] gspca_stk1135: Sensor read failed [ 414.949452][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 414.955909][T11397] gspca_stk1135: Sensor write failed 23:00:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='\x00\xf0\x14\x91\xb8U5vg\xef\xd5\xde\xab\x94\xeedF\v\xea\xd7hk\xfbf\xf1\xc88fS\x97+\x8a\x7f\xf8\xafQ1\xe3\xa8\x8a_*\v\xdf\x8bZx\x95%\xc0\n\xd6\xc0\xe8k^\x17C\x8bMGG\xdb\xe0\xa3?\x0e\xed\\\x1a\xf8\xd6hS\x8c0\x0f\xe0\x8bR\xfd\xbd\xc7\x88\xef&u\xa44\xd17\xd0\xad+\x8d\x0e\xc7\xdc\x84wc?\x17j\b\x84\xe1n\xd7\xfa+O\x98:\xfa;w\xba\xee&}\xe2\xb43tFG\xd1V\x1b\x8c|\xdb\xcc\xf5G#\xec\x90\xd2\x1bI\bP\x96,\xa3iM\xb5f\xe1\xdci\b\xc1\xd7\x00\x06F\x16\x1d\xd9\x81\xb9\xb1\xf6p\xec`\x8e\x83\xaes\xbf\x97t_\xd9') getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) getdents64(r0, 0x0, 0x0) [ 414.961296][T11397] gspca_stk1135: serial bus timeout: status=0x00 [ 414.967959][T11397] gspca_stk1135: Sensor write failed [ 414.974252][T11397] stk1135: probe of 4-1:0.28 failed with error -71 23:00:57 executing program 5: unshare(0x2000400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) [ 415.124578][T11397] usb 4-1: USB disconnect, device number 20 23:00:57 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) [ 415.272762][ T30] usb 1-1: new high-speed USB device number 25 using dummy_hcd 23:00:57 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 23:00:57 executing program 5: syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6f, 0xe8, 0xdf, 0x8, 0xeb1a, 0x2801, 0x233f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe3, 0x0, 0x1, 0x4d, 0xcb, 0x6b, 0x0, [], [{{0x9, 0x5, 0x85}}]}}]}}]}}, 0x0) [ 415.392760][T11399] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 415.642300][ T30] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 415.653521][ T30] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.732189][T11397] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 415.752430][T11399] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 415.760907][T11399] usb 2-1: config 0 has no interface number 0 [ 415.767308][T11399] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 415.777060][T11399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.787491][T11399] usb 2-1: config 0 descriptor?? [ 415.822351][ T30] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.831538][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.840372][ T30] usb 1-1: Product: syz [ 415.844731][ T30] usb 1-1: Manufacturer: syz [ 415.849379][ T30] usb 1-1: SerialNumber: syz [ 415.860641][T11399] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 416.102344][T11397] usb 6-1: config 0 has an invalid interface number: 227 but max is 0 [ 416.110732][T11397] usb 6-1: config 0 has no interface number 0 [ 416.117181][T11397] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=23.3f [ 416.126582][T11397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.137007][T11397] usb 6-1: config 0 descriptor?? [ 416.212320][ T30] usb 1-1: unit 0 not found! [ 416.242360][ T30] usb 1-1: USB disconnect, device number 25 [ 416.385102][T11397] usb 6-1: USB disconnect, device number 4 23:00:58 executing program 0: syz_usb_connect$uac1(0x0, 0xa8, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x0, 0x0, 0x6}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:00:58 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x10, 0x80002, 0x0) timer_create(0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) 23:00:58 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:00:58 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x140, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x8001, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 23:00:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/47, 0x2f) getdents(r0, &(0x7f0000000200)=""/46, 0x2e) [ 416.992216][T11340] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 417.192108][T11397] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 417.353501][T11340] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 417.364603][T11340] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 417.552252][T11340] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.561505][T11340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.564201][T11397] usb 6-1: config 0 has an invalid interface number: 227 but max is 0 [ 417.569861][T11340] usb 1-1: Product: syz [ 417.578077][T11397] usb 6-1: config 0 has no interface number 0 [ 417.582249][T11340] usb 1-1: Manufacturer: syz [ 417.582286][T11340] usb 1-1: SerialNumber: syz [ 417.598051][T11397] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=23.3f [ 417.607290][T11397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.623333][T11397] usb 6-1: config 0 descriptor?? [ 417.864008][T11397] usb 6-1: USB disconnect, device number 5 [ 417.952240][T11340] usb 1-1: unit 0 not found! [ 417.993051][T11340] usb 1-1: USB disconnect, device number 26 [ 418.942377][T11399] gspca_stk1135: reg_w 0x351 err -71 [ 418.948801][T11399] gspca_stk1135: serial bus timeout: status=0x00 [ 418.955378][T11399] gspca_stk1135: Sensor write failed [ 418.960782][T11399] gspca_stk1135: serial bus timeout: status=0x00 [ 418.968090][T11399] gspca_stk1135: Sensor write failed [ 418.973613][T11399] gspca_stk1135: serial bus timeout: status=0x00 [ 418.981014][T11399] gspca_stk1135: Sensor read failed [ 418.986461][T11399] gspca_stk1135: serial bus timeout: status=0x00 [ 418.992887][T11399] gspca_stk1135: Sensor read failed [ 418.998121][T11399] gspca_stk1135: Detected sensor type unknown (0x0) [ 419.004966][T11399] gspca_stk1135: serial bus timeout: status=0x00 [ 419.011338][T11399] gspca_stk1135: Sensor read failed [ 419.016800][T11399] gspca_stk1135: serial bus timeout: status=0x00 [ 419.023236][T11399] gspca_stk1135: Sensor read failed [ 419.028527][T11399] gspca_stk1135: serial bus timeout: status=0x00 [ 419.035093][T11399] gspca_stk1135: Sensor write failed [ 419.040607][T11399] gspca_stk1135: serial bus timeout: status=0x00 [ 419.047296][T11399] gspca_stk1135: Sensor write failed [ 419.052890][T11399] stk1135: probe of 2-1:0.28 failed with error -71 [ 419.068731][T11399] usb 2-1: USB disconnect, device number 19 [ 419.692070][T11399] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 420.052280][T11399] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 420.060766][T11399] usb 2-1: config 0 has no interface number 0 [ 420.067628][T11399] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 420.077573][T11399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:01:02 executing program 1: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='security.selinux\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/99, 0xe) 23:01:02 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x9}, {0x0, 0x0, 0x7}, {0x0, 0x5}, {}, {0x5}, {0x3, 0x0, 0x1}, {0x80000001, 0x0, 0x7, [], 0x42a}, {0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x6, [], 0x3657e047}]}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:01:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:02 executing program 0: syz_usb_connect$uac1(0x0, 0xa8, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x0, 0x0, 0x6}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 23:01:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x1f, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) [ 420.116903][T11399] usb 2-1: config 0 descriptor?? [ 420.148172][T11399] usb 2-1: can't set config #0, error -71 [ 420.201505][T11399] usb 2-1: USB disconnect, device number 20 [ 420.215918][T20028] user requested TSC rate below hardware speed 23:01:02 executing program 1: unshare(0x20040600) r0 = memfd_create(&(0x7f0000000080)='dev ', 0x3) fcntl$addseals(r0, 0x409, 0xd) [ 420.290224][T20040] user requested TSC rate below hardware speed 23:01:02 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0xfffffffffffffff9, 0x0, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x100000001}], 0xfd}}}) 23:01:02 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000000}, [@ldst={0x6, 0x5, 0x2000cf66, 0x0, 0xf001}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 420.472500][T11340] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 420.853572][T11340] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 420.864667][T11340] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 421.032316][T11340] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.042431][T11340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.050584][T11340] usb 1-1: Product: syz [ 421.054967][T11340] usb 1-1: Manufacturer: syz [ 421.059677][T11340] usb 1-1: SerialNumber: syz [ 421.422257][T11340] usb 1-1: unit 0 not found! [ 421.462357][T11340] usb 1-1: USB disconnect, device number 27 23:01:05 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x84, 0x80, 0x0, &(0x7f0000000080)) 23:01:05 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0xd, 0xfffffffffffffffe, 0xff95) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x248240) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000140)=0x7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000003c145aa62547cdaee1b7be60537cbafb6446ae9b", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000480)={r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x20ec}}}, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r6, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f00000002c0)=0xfffffffffffffe44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x141401, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x10, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write(r9, 0x0, 0x0) r10 = dup(r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r10, &(0x7f00000000c0), 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r10, 0xc0945662, &(0x7f0000000340)={0x5, 0x0, [], {0x0, @reserved}}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000300)=0x8, 0x7fffffff, 0x6) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x49) 23:01:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) dup2(r0, r1) 23:01:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1}, 0x90) 23:01:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r17, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) 23:01:05 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\xff\x00\x00\x80\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00') 23:01:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000500)="11dca5055e0bcfec7bf070") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0xf) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) 23:01:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 23:01:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000680)='net/kcm\x00\b\x00\'\xde7znT\r\x1cc\x14=\xd5=_w_\xc8\xa8\x97i\xc8\"\x92\x89{\x90e\x97\x88\xd3\xe4\xf7y\'\x1b\xa7(\x87\x92X\xabK4\xca\xac\xe0P\x99\xa5\xcfB\x88\x03\x14\xae\xa6\xbfG\xe4\x12\xcd\xfe\rIG\xe3Vm\xed\xa2\xb5\x1a\xa4\x18)[[i\xa1\x0eq\xe2\xfe\xf2\xe5\xac\x88\x04\xba`\xac>z\x92S\x89E^Wv\x1brJx\xe9\xa8\x06t\x13%\"N]~\x00IA\x18\xa4\x86\xb6\xad2\x81J8O\xb4)\x89\x14\xd4\x8d\xf7\x85\xeb\x00\x00\x00\x00\x00\x00\x00\x02\xf3\ap|!\x97\x18R\xfc\r\x00\x00\x19\x00\x00\x00\xf9\xb0?s\x8cg\xdf\xc2X8\xfc\x7f\xff\xa5\x86\xf7\xe4d\xe3J\x88s\xf9F\xac\x02V\xaf\xe8\xcfG.\xa8\x03sRU\xa2\xbf\xb7\xe4\x8d\xc24\xdc\xf1\xd7x\xef\xd4\xda\xbc>a\xc3\xb7\x19\xc5\xa3y\xf53\xf2,\xa1\xd7 \xd1a\xcd\xbd/\xaf\x03\xd6\nP\xc5\x8f+\x04\f`?^-*\xf5j\r\xed\t\x00\xd5]5`\xf2S\xa7\xcc\xf5Z\xd7\xf3e\x83\xa2\xe0jUq%\x99\xa0\xac&[\xa8\xde8\xfb9\xe0\x02\xc9$\xbd?\xac\x984\xe6xY\x7f\x1cT\x87$\f\x91|\xd8\xa6\xf6\xb7\x16\xb2\xf4\xeec|\x88\xfa\xea\xe4\xa7\a\x12\x03\xff4\xe2\x1f\xae\xc0I\xaeh\xaaTo\xb8\x9f\x93\x90\xe8\xd9\xe5\x05bB\xa9b`K\xfb\x7f\x91\xc3\xba\xe6\xa9\xc0\xdcQ\xbd\x1fb\xb5\xde\x1b.0\xec\x87\xc3C\x18DX\x89#\xf5\xda\xb3ce\xc0\x83\x9c\x96\xbc\xfa\xd5\xffu\x01\xc7\xfb\xf0\xf0\xcd\t\xf3\x81l(\x90\xa0\x11M\x9c\xf7J\x97\x14\xd3T\xeb\xf5\xc4\x17\x86aB`\xb2\xd7\xab\x9bII\x9e`n\xe6\xc1\xfe\x1b^\xab\xcd\xe6P\xaaHX\xf4\b\x05t\\n+\xae\xa0\xf9s\xa9E\xab\xef\xafIn\xbc\x1b(\xce\xbd+\x85r`\x13\x82\x00`<\xb3F\xc4\xeb\xc6\x1f\xce\xcfT\x84\x1a\xab\x8e3\xd4-\xd6\xff\xef\x01^\xd7\xf7A\xe0]yn\xf0\xdb\xd1\x92\x16\x05\xc7\xf9\x01$\xf5\x9ddn\x99u\x9c\xe8\x7f\xea\xfeddB\x87\xd7!\xa6xP#\xe7R\xeeF8\x15\xe8\x0f=\xca\x86]\xc29\x11\xb2\xc8Ir\x84\xe5`\xeb\x11L') lseek(r0, 0x2, 0x0) 23:01:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x2, 0x1, 0x98}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff32, 0x10, &(0x7f0000000000), 0xfffffffffffffed6}, 0x48) 23:01:05 executing program 5: r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x7fffffffffffffff, 0xfff}) 23:01:05 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0xd, 0xfffffffffffffffe, 0xff95) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x248240) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000140)=0x7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000003c145aa62547cdaee1b7be60537cbafb6446ae9b", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000480)={r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x20ec}}}, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r6, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f00000002c0)=0xfffffffffffffe44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x141401, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x10, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write(r9, 0x0, 0x0) r10 = dup(r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r10, &(0x7f00000000c0), 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r10, 0xc0945662, &(0x7f0000000340)={0x5, 0x0, [], {0x0, @reserved}}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000300)=0x8, 0x7fffffff, 0x6) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x49) 23:01:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r17, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) 23:01:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1, 0x2}, 0x12d48122) 23:01:06 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x800000000016, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x11, r0, 0x1, &(0x7f0000000080)={0x0}) 23:01:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0x5450, 0x0) 23:01:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x5, @raw_data="09d61dabf272f118f424d5e2d04a69ed008c7cdee09e61565944d8846ed677e481c403fecc6cac0e2892c8c9c676b198174477e0970f9053618ba8aa47dd01ad603843bfe9eeb93111f8c0e63e63aa85a60ab13b1a2e6d66f8d46d0e857f150a418c703ebe412b2c7aeb0fcf66fdc37d63c3ba0f65f07bc10970e8c52a59f14ca86eda6be5d689da7e18fa9abfc4feefe6a6d95da37bf0c8f9184c88472e453203d8984b9142f21bb1f9c2813a92866b7c3895ebb2c320cd66d93f10fb3d521787a11f1df8678438"}) 23:01:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r17, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r11, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r23 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r24 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r24, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r23, r24, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r23, 0x4c01) 23:01:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) shutdown(r3, 0x0) accept(r2, 0x0, 0x0) 23:01:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0xffffffffffffff7f}) 23:01:06 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0x295, 0x0}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x68}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x2b2}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x109}, {&(0x7f0000000480)=""/60, 0xb4}, {&(0x7f0000000200)=""/77, 0x1c4}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f00000008c0)=""/198, 0x3d6}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 23:01:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0xfffffffffffffffe) 23:01:06 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f0000000080)) 23:01:06 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0xd, 0xfffffffffffffffe, 0xff95) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x248240) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000140)=0x7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000003c145aa62547cdaee1b7be60537cbafb6446ae9b", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000480)={r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x20ec}}}, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r6, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f00000002c0)=0xfffffffffffffe44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x141401, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x10, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write(r9, 0x0, 0x0) r10 = dup(r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r10, &(0x7f00000000c0), 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r10, 0xc0945662, &(0x7f0000000340)={0x5, 0x0, [], {0x0, @reserved}}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000300)=0x8, 0x7fffffff, 0x6) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x49) 23:01:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'b\x14\x90\x10_slA\x97\xdc\x8f\x00\x00\x00\x00 ', 0x43732e5398416f1a}) ioctl$TUNSETOFFLOAD(r0, 0x800454dd, 0x960000) 23:01:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:01:07 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x800000000016, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x11, r0, 0x1, &(0x7f0000000080)={0x0}) 23:01:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f0000001240)=ANY=[], 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_disconnect(r2) 23:01:07 executing program 3: request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0x0, 0x6c00}, &(0x7f0000001fee)='R\trusB\xe3cusgrViu:1e', 0x0) 23:01:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @dev}}, @IFA_FLAGS={0x8, 0x8, 0x390}]}, 0x34}}, 0x0) 23:01:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r2 = dup(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000eed000)={0x2, 0x4e21, @dev}, 0x10) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e3d, 0x0, @empty}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r0, r5, 0x0, 0x40000080000000) [ 425.392144][T11397] usb 1-1: new high-speed USB device number 28 using dummy_hcd 23:01:07 executing program 3: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) 23:01:07 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) [ 425.632374][T11397] usb 1-1: Using ep0 maxpacket: 8 23:01:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @dev}}, @IFA_FLAGS={0x8, 0x8, 0x390}]}, 0x34}}, 0x0) 23:01:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2000400) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x27b, &(0x7f0000002580)=[{&(0x7f0000000000)=""/115, 0x73}], 0x300}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x4000000000000000) [ 425.752627][T11397] usb 1-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 425.770537][T11397] usb 1-1: config 0 interface 0 has no altsetting 0 [ 425.777355][T11397] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 425.786528][T11397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:01:07 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0xd, 0xfffffffffffffffe, 0xff95) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x248240) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000140)=0x7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000003c145aa62547cdaee1b7be60537cbafb6446ae9b", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000480)={r6, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x20ec}}}, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={r6, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f00000002c0)=0xfffffffffffffe44) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x141401, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x10, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0}, 0x26) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write(r9, 0x0, 0x0) r10 = dup(r7) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r10, &(0x7f00000000c0), 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r10, 0xc0945662, &(0x7f0000000340)={0x5, 0x0, [], {0x0, @reserved}}) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000300)=0x8, 0x7fffffff, 0x6) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x49) 23:01:07 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x800000000016, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x11, r0, 0x1, &(0x7f0000000080)={0x0}) 23:01:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @dev}}, @IFA_FLAGS={0x8, 0x8, 0x390}]}, 0x34}}, 0x0) [ 426.039124][T11397] usb 1-1: config 0 descriptor?? 23:01:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="302600002c00000226bd7000fbdbdf250800000008000500", @ANYRES32, @ANYBLOB="14000c006372633332632d67656e6572696300000800360004007800e8118800eb3c3d1b91498e874970d429f9abcac870e96cc51f6b21788eb57f9cf6f8211d837b5fcaed4e821dd692d036a061973c3a227d9d9d3b8babf414c069bf7418d45baeb404b7af2168458f4d45382ac2a37295cb51c64e2083c0e29774175b954d03584b4fc39658a3da324235139181ba39a48468a5d3545fa14201a7432e97052885875f08351e1f1a6585ce29a93c38797fcba6460db3390cd9ae44b66c45d5d3027d684d7db384fd5e7a76f0a13d6dfccad05e90dd6644643c276a71accba469ad03040015000400800008006200", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x9}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x55d00000, 0x10}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 426.243086][T20769] user requested TSC rate below hardware speed [ 426.290438][T20769] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 426.383016][T20769] user requested TSC rate below hardware speed [ 426.494875][T20816] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 426.533270][T11397] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0008/input/input25 [ 426.616535][T11397] sony 0003:054C:03D5.0008: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 426.973547][T11340] usb 1-1: USB disconnect, device number 28 [ 428.202259][T11340] usb 1-1: new high-speed USB device number 29 using dummy_hcd 23:01:10 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r18, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup2(r20, r19) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r23, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r24 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r25 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r25, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) sendfile(r24, r25, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r24, 0x4c01) 23:01:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @dev}}, @IFA_FLAGS={0x8, 0x8, 0x390}]}, 0x34}}, 0x0) 23:01:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000800000008001b00000000000800040055000000"], 0x30}}, 0x0) 23:01:10 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x800000000016, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x11, r0, 0x1, &(0x7f0000000080)={0x0}) 23:01:10 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r0, &(0x7f0000000080)="200000001a00010000000066835f7f081c00"/32, 0x20) 23:01:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f0000001240)=ANY=[], 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_disconnect(r2) [ 428.473784][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 428.501347][T20833] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 428.515818][T20833] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 428.527187][T20833] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 428.539394][T20833] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 428.552199][T20833] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 428.563969][T20833] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 428.576216][T20833] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 428.613668][T20841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 23:01:10 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2ca) syz_open_procfs(0x0, &(0x7f0000272000)) 23:01:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001680)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}) 23:01:10 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:10 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:01:11 executing program 5: r0 = gettid() rt_sigtimedwait(&(0x7f0000000300)={0xfffffffffffffffe}, 0x0, 0x0, 0x8) tkill(r0, 0x14) [ 428.892394][T11340] usb 1-1: device not accepting address 29, error -71 23:01:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80045530, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "2bfd8bc82675d47869a37a664ac0e7a4"}) 23:01:11 executing program 1: r0 = fsopen(&(0x7f0000000100)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='nodev\x00', &(0x7f0000000300)='$ppp1GPLuserself\x00', 0x0) 23:01:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000001140)=0x40) 23:01:11 executing program 4: socket$packet(0x11, 0x80a, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x400000000000018f, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local={0xac, 0x14, 0xffffffffffffffff}}, @igmp={0x0, 0x0, 0x0, @loopback}}}}}, 0x0) 23:01:11 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 429.272560][T11340] usb 1-1: new high-speed USB device number 30 using dummy_hcd 23:01:11 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 429.455158][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 429.522401][T11340] usb 1-1: Using ep0 maxpacket: 8 [ 429.580817][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 429.642471][T11340] usb 1-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 429.655942][T11340] usb 1-1: config 0 interface 0 has no altsetting 0 [ 429.662764][T11340] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 429.671986][T11340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.742678][T11340] usb 1-1: config 0 descriptor?? [ 430.233616][T11340] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0009/input/input26 [ 430.249306][T11340] sony 0003:054C:03D5.0009: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 430.704566][T11340] usb 1-1: USB disconnect, device number 30 23:01:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f0000001240)=ANY=[], 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_disconnect(r2) 23:01:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x404, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000002c0)) 23:01:13 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="16389cff569287ec", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 23:01:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000340)='./control\x00', 0x0) r3 = creat(&(0x7f0000000240)='./control/file0\x00', 0x0) r4 = open(&(0x7f0000000200)='./control\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000180)=""/80, 0x5e) unlinkat(r4, &(0x7f0000000400)='./file0\x00', 0x0) close(r3) 23:01:13 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:01:13 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:13 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:01:13 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f3030000000000000000001b"], 0xc) recvfrom(r0, 0x0, 0xc, 0x0, 0x0, 0x0) 23:01:13 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="16389cff569287ec", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 23:01:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) unshare(0x600) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) 23:01:14 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f3030000000000000000001b"], 0xc) recvfrom(r0, 0x0, 0xc, 0x0, 0x0, 0x0) [ 432.042415][ T3903] usb 1-1: new high-speed USB device number 31 using dummy_hcd 23:01:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfffffffffffffcd9, 0x0, 0x0, 0xfffffffffffffe93) [ 432.275031][T21336] user requested TSC rate below hardware speed [ 432.282426][ T3903] usb 1-1: Using ep0 maxpacket: 8 [ 432.374593][T21336] user requested TSC rate below hardware speed [ 432.402772][ T3903] usb 1-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 432.415954][ T3903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 432.423208][ T3903] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 432.432671][ T3903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.443651][ T3903] usb 1-1: config 0 descriptor?? [ 432.933011][ T3903] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.000A/input/input27 [ 432.948124][ T3903] sony 0003:054C:03D5.000A: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 433.381247][ T3903] usb 1-1: USB disconnect, device number 31 23:01:16 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="16389cff569287ec", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 23:01:16 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x154}}, 0x0) 23:01:16 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f3030000000000000000001b"], 0xc) recvfrom(r0, 0x0, 0xc, 0x0, 0x0, 0x0) 23:01:16 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [{[@loopback]}, {[@dev]}]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 23:01:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x29}}, &(0x7f0000000fc0)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_usb_connect(0x0, 0x0, &(0x7f0000001240)=ANY=[], 0x0) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_usb_disconnect(r2) 23:01:16 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="16389cff569287ec", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 23:01:16 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [{[@loopback]}, {[@dev]}]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 23:01:16 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @empty}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f3030000000000000000001b"], 0xc) recvfrom(r0, 0x0, 0xc, 0x0, 0x0, 0x0) 23:01:16 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8932, &(0x7f0000000300)='gre0\x00') 23:01:16 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2e, &(0x7f0000000000), 0x20a1562f) [ 434.712098][ T3903] usb 1-1: new high-speed USB device number 32 using dummy_hcd 23:01:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0xfffc, 0x0, 0x80000000d5}, 0x98) 23:01:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast2, @ipv4={[], [], @dev}, @ipv4={[], [], @empty}}) 23:01:16 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [{[@loopback]}, {[@dev]}]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 23:01:16 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 434.972568][ T3903] usb 1-1: Using ep0 maxpacket: 8 23:01:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)=@newlink={0x28, 0x12, 0x1, 0x0, 0x0, {0x7d0a}, [@IFLA_NUM_TX_QUEUES={0x8}]}, 0x28}}, 0x0) 23:01:17 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x14}, 0x3c) [ 435.124666][ T3903] usb 1-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 435.138403][ T3903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 435.145211][ T3903] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 435.154390][ T3903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.279510][ T3903] usb 1-1: config 0 descriptor?? [ 435.772875][ T3903] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.000B/input/input28 [ 435.788013][ T3903] sony 0003:054C:03D5.000B: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 436.217539][ T3903] usb 1-1: USB disconnect, device number 32 23:01:19 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfafc, {{0x19000000, 0x0, 0x0, @rand_addr="27909b2d67ac0dcded3ed7eeca670d08"}, {0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, r1}}, 0x232) 23:01:19 executing program 5: syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [{[@loopback]}, {[@dev]}]}, @ssrr={0x89, 0x3}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 23:01:19 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000002c0)=""/246) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)=0x4040) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)="80fd02", 0x3}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 23:01:19 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0xfffc, 0x0, 0x80000000d5}, 0x98) 23:01:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x3f, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) 23:01:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'caif0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 23:01:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdb000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x488, 0x1000011e57ed0]}) 23:01:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x3f, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) [ 437.615452][T21709] user requested TSC rate below hardware speed 23:01:19 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x3f, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) 23:01:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x3, 0x0, 0x0, 0x121}, 0x9c) 23:01:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0xfffc, 0x0, 0x80000000d5}, 0x98) 23:01:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'caif0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 23:01:20 executing program 3: recvmsg(0xffffffffffffffff, 0x0, 0x65591c6f98638e2a) 23:01:20 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x3f, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) 23:01:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'caif0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 23:01:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'caif0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 23:01:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newsa={0xf0, 0x1a, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 23:01:20 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c05e87c55a1bc000900b800069903000000050015000300812fa80016000f0063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) 23:01:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x80000080000000d0, &(0x7f0000000180), 0xffffffffffffffff) [ 438.621668][T21879] IPv6: NLM_F_CREATE should be specified when creating new route 23:01:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'caif0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 23:01:20 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$9p(r0, &(0x7f0000000000)="0600000000000000c9b9000f02d720582a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0x68) [ 438.902613][T21941] dlm: no locking on control device [ 438.916606][T21950] dlm: no locking on control device 23:01:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0xfffc, 0x0, 0x80000000d5}, 0x98) 23:01:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'caif0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 23:01:21 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000100)="46de", 0x2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 23:01:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f00000000c0)) 23:01:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x40000003}, 0x20) 23:01:21 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000189063e0000c30600c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) 23:01:21 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r1, 0x0, 0x1000) 23:01:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'caif0\x00', {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 23:01:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x1, 0x2e2) io_setup(0x200, &(0x7f0000000300)=0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x52}) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r1, &(0x7f0000000080), 0x101b2}]) 23:01:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)='q', 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) sendmsg$inet(r1, &(0x7f0000001800)={0x0, 0xffffffffffffff4f, &(0x7f0000001680)=[{&(0x7f0000000280)="ac", 0x1}], 0x74}, 0x8000) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) 23:01:21 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='persona^]\xa9\xcd\x00') 23:01:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=@routing, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bc0b13c0000000000000000000000000000000000000000000000000000000000000000000300"/112], 0xb8}}, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f0000000180)) 23:01:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000100)={0x7c, 0x0, [0x40000103]}) 23:01:22 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:22 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/16, 0x4}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)=0x19) clone(0x0, 0x0, 0x0, 0x0, 0x0) 23:01:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x14, &(0x7f0000000140), 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) r6 = dup2(r0, r5) dup3(r6, r1, 0x0) 23:01:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x42071819b9f08b36, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000002640)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 440.058457][T22149] user requested TSC rate below hardware speed 23:01:22 executing program 0: unshare(0x8000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000640)={0x0, 0x0, 0x0, r2}) 23:01:22 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000900)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 23:01:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000080)={0x0, 0x0, 0x2000000}) 23:01:22 executing program 5: mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000300)="390000001300090468fe585de9e600000700ff3f03000000450001070000001419001a0004001210070000f48aa159ab090000", 0x33}], 0x1) r1 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 23:01:22 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:22 executing program 4: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) 23:01:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) [ 440.687303][T22291] Failed to obtain node identity [ 440.692833][T22291] Enabling of bearer rejected, failed to enable media [ 440.740442][T22304] Failed to obtain node identity [ 440.745908][T22304] Enabling of bearer rejected, failed to enable media [ 440.755181][ T3903] usb 2-1: No LPM exit latency info found, disabling LPM. 23:01:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r1 = epoll_create(0x100004) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x8000000d}) ioctl$TIOCSBRK(r0, 0x40044591) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 440.842969][ T3903] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 441.092283][ T3903] usb 2-1: string descriptor 0 read error: -22 [ 441.098854][ T3903] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.108254][ T3903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.154161][ T3903] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 441.355791][T11399] usb 2-1: USB disconnect, device number 21 [ 442.132135][T11399] usb 2-1: new low-speed USB device number 22 using dummy_hcd 23:01:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x42071819b9f08b36, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000002640)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 23:01:24 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x69, 0x3b, 0x44, 0x8, 0x8ca, 0x22, 0xb9bd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x82, 0x0, 0x0, 0x5c, 0x69, 0x25}}]}}]}}, 0x0) 23:01:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 23:01:24 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:24 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="02071604020000000e0101000001002025f10f022f5c6b796fdec5eba45d92d5f0b248000b17a103004a076462284d8bf691568bc7fd070165bd1bd624f7030000000060cddccd3758426c871390b0a68fbd3dfc6679b089f6d4abe572ce762d3c9eaf4ded5fef07d8ad4946cf00"/125], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600008000000a00f50000000000000007007f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89cc4b2bd01a12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe174e404721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b73383b717e127c6a36da871a86cc8c8dda850000000002000100000000000000020080ffffff05000500000000000a000000def7bd3e10c05ce0099e088c374525b1f361d6c7358f00000000fe04654184a88aa49af6d3385443608204fd2f0a8e7f36b51b8c111a11526cc92a34da97348aa1e55e86429a374167641de7060933bfc02befaf8fd06658ea9c382b5cacba6d7e1a8c9e627a6c5d885d96d8c456caa29fa759224872f237d960f9bd3e93872452834345b9138bd1e1ce35e8634023f06a625c651fa3c9e7840cd45f500b8d"], 0xd8}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400006a, 0x0) 23:01:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x1, 0x0, @buffer={0xee, 0x0, 0x0}, &(0x7f0000000040)="fa", 0x0, 0x0, 0x4, 0x0, 0x0}) 23:01:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="1104000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000e00ffffffff0000000008000100736662002c00020028000100000000000000002000"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 23:01:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 23:01:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000280)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) 23:01:24 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) [ 442.724611][ T3903] usb 1-1: new high-speed USB device number 33 using dummy_hcd 23:01:24 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000001000)={{0x12, 0x1, 0x0, 0x49, 0xdb, 0x2e, 0x8, 0xc45, 0x1010, 0x6d5d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x1, 0x62, 0xf0, 0x4, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x8}}]}}]}}]}}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) [ 442.822741][T11399] usb 2-1: device not accepting address 22, error -71 23:01:25 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1) inotify_rm_watch(r1, r3) [ 442.982885][ T3903] usb 1-1: Using ep0 maxpacket: 8 [ 443.112890][ T3903] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 443.121351][ T3903] usb 1-1: config 0 has no interface number 0 [ 443.127725][ T3903] usb 1-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=b9.bd [ 443.136929][ T3903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.172284][T11340] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 443.205962][ T3903] usb 1-1: config 0 descriptor?? [ 443.212395][T11399] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 443.250621][ T3903] aiptek 1-1:0.130: interface has 0 endpoints, but must have minimum 1 [ 443.260134][ T3903] aiptek: probe of 1-1:0.130 failed with error -22 [ 443.442777][T11340] usb 5-1: Using ep0 maxpacket: 8 [ 443.454870][ T3903] usb 1-1: USB disconnect, device number 33 [ 443.562637][T11340] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 443.571055][T11340] usb 5-1: config 0 has no interface number 0 [ 443.572284][T11399] usb 2-1: No LPM exit latency info found, disabling LPM. [ 443.577327][T11340] usb 5-1: config 0 interface 203 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 443.596217][T11340] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 443.605430][T11340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.852430][T11399] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 443.914299][T11340] usb 5-1: config 0 descriptor?? [ 443.996754][T11340] yurex 5-1:0.203: USB YUREX device now attached to Yurex #0 [ 444.157323][T11340] usb 5-1: USB disconnect, device number 5 [ 444.166673][T11340] yurex 5-1:0.203: USB YUREX #0 now disconnected [ 444.183716][T11399] usb 2-1: string descriptor 0 read error: -22 [ 444.190113][T11399] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.199640][T11399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.242234][ T3903] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 444.243967][T11399] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 444.450227][T11340] usb 2-1: USB disconnect, device number 23 [ 444.492439][ T3903] usb 1-1: Using ep0 maxpacket: 8 [ 444.612342][ T3903] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 444.620872][ T3903] usb 1-1: config 0 has no interface number 0 [ 444.627328][ T3903] usb 1-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=b9.bd [ 444.636602][ T3903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.646134][ T3903] usb 1-1: config 0 descriptor?? [ 444.685295][ T3903] aiptek 1-1:0.130: interface has 0 endpoints, but must have minimum 1 [ 444.694281][ T3903] aiptek: probe of 1-1:0.130 failed with error -22 [ 444.884439][ T3903] usb 1-1: USB disconnect, device number 34 [ 444.922391][T11399] usb 5-1: new high-speed USB device number 6 using dummy_hcd 23:01:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x42071819b9f08b36, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000002640)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 445.172148][T11399] usb 5-1: Using ep0 maxpacket: 8 [ 445.282214][T11340] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 445.292968][T11399] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 445.301392][T11399] usb 5-1: config 0 has no interface number 0 [ 445.307736][T11399] usb 5-1: config 0 interface 203 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 445.318951][T11399] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=6d.5d [ 445.328182][T11399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.337639][T11399] usb 5-1: config 0 descriptor?? 23:01:27 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000000)=[{}, {}]}, 0x8) 23:01:27 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1) inotify_rm_watch(r1, r3) 23:01:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 445.389747][T11399] yurex 5-1:0.203: USB YUREX device now attached to Yurex #0 23:01:27 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1) inotify_rm_watch(r1, r3) [ 445.600905][T11399] usb 5-1: USB disconnect, device number 6 [ 445.613367][T11399] yurex 5-1:0.203: USB YUREX #0 now disconnected 23:01:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) 23:01:27 executing program 0: syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}, @extension_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x20, 0x0, 0x0, 0x0, "09296d76ab78"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x2, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 445.675936][T11340] usb 2-1: No LPM exit latency info found, disabling LPM. [ 445.784312][T11340] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 23:01:27 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x1) inotify_rm_watch(r1, r3) 23:01:27 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1}) 23:01:28 executing program 5: syz_emit_ethernet(0x68, &(0x7f0000000080)={@random="ff7fab82ffb1", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x32, 0x40000000003a, 0x0, @remote, @mcast2, {[], @icmpv6=@ni={0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00, "f01492f0abe705b476a15c97a8fd759972b6e0764f810c5cc0b7ed50343c4cb9b077"}}}}}}, 0x0) [ 446.082362][T11340] usb 2-1: string descriptor 0 read error: -22 [ 446.088992][T11340] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.098246][T11340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.112107][ T3903] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 446.216525][T11340] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 446.352604][ T3903] usb 1-1: Using ep0 maxpacket: 8 [ 446.436958][T11399] usb 2-1: USB disconnect, device number 24 [ 446.492360][ T3903] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 446.501439][ T3903] usb 1-1: config 1 has no interface number 1 [ 446.508729][ T3903] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 446.519328][ T3903] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 446.532431][ T3903] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 446.702418][ T3903] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.711862][ T3903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.720206][ T3903] usb 1-1: Product: syz [ 446.724513][ T3903] usb 1-1: Manufacturer: syz [ 446.729163][ T3903] usb 1-1: SerialNumber: syz 23:01:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x283}) 23:01:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x42071819b9f08b36, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000002640)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 23:01:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) 23:01:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_CARRIER={0x8}]}, 0x30}}, 0x0) 23:01:29 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 447.047995][T23050] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 447.057743][T23050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.149142][T23120] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 447.158907][T23120] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:01:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 447.191113][ T3903] usb 1-1: USB disconnect, device number 35 23:01:29 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 447.342534][T11397] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 447.722257][T11397] usb 2-1: No LPM exit latency info found, disabling LPM. [ 447.802414][T11397] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 447.862100][ T3903] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 448.062270][T11397] usb 2-1: string descriptor 0 read error: -22 [ 448.068983][T11397] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.079401][T11397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.112106][ T3903] usb 1-1: Using ep0 maxpacket: 8 [ 448.125504][T11397] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 448.252434][ T3903] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 448.261504][ T3903] usb 1-1: config 1 has no interface number 1 [ 448.267918][ T3903] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 448.278517][ T3903] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 448.293149][ T3903] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.328640][ T12] usb 2-1: USB disconnect, device number 25 [ 448.462618][ T3903] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.472176][ T3903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.480454][ T3903] usb 1-1: Product: syz [ 448.484837][ T3903] usb 1-1: Manufacturer: syz [ 448.489504][ T3903] usb 1-1: SerialNumber: syz 23:01:30 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r0, 0x0, 0x8000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f9048a453995c937ff868c57afb98de2e6cf510f38f37a827b9b779b94b9f82df10e5dc7f94eace7331", 0xff9d, 0x0, 0x0, 0x0) 23:01:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800001000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x1267, 0x719000) 23:01:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0xfffffffffffffca3}}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x4}}]}, 0x30}}, 0x0) 23:01:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x2, 0x1, 0xa8}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48) 23:01:30 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 448.908972][ T3903] usb 1-1: USB disconnect, device number 36 [ 448.989645][T23281] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. [ 449.052623][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.059110][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:01:31 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x86, &(0x7f0000000140), &(0x7f0000000040)=0x8) [ 449.109223][T23281] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 23:01:31 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00000000000905830300911b00000000f07ea2ac5d02206d8a5085fd1e92759c2b28f368ab64fcbe75e95398195ce7c30cffc01434b1050b2bd66611aa3c1429700205111609cc14b0418c9a384d4d279a040edbfa56ba3688bb82b94c8c4025b90bd94c17746c52dacf466a3f2feee9e2867b7a643179b92c75f6a0d71182adf3b711d6b1a88f1a909cf91552c260739b33c18dc4c4f2b76bbea80ec8112902f31615f4178650eb15318119123116704815a09c0da318d26d00f31bc6673b802afcc07705b0e0b0bcb6e67d1d14c41c2380bfe2a89c5f58250664a7b5d8b823ce8fb7089ad6722b68101ef7045b76d7a6272219b54e9a29f1a05c4742507b292277dbfd30ca77b8a08d8bff701b98cb6230879dac7f7e539a5f6b965543c8eb8610c788631484cba16298a632e31a2b6296e7fdbd355e051b6cc22616c9f9a800bbd2935c5d81d56937f4"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x51, 0x80, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 23:01:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setrlimit(0x2, &(0x7f0000000000)={0x0, 0xffffffff00000001}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0xffffffffffffffff) [ 449.292439][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.298757][ C0] protocol 88fb is buggy, dev hsr_slave_1 23:01:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) geteuid() r5 = socket(0x0, 0x2, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x111200, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003240)={0xb7518f4cd32d3f05, 0x0, 0x2080, {0x3000, 0x2000, 0x3}, [], "5d8dc606d4611df34d5e65761911ba1d890471341ed838dd2072ba00247bfd7f080a5c2dbbc96861f2d3bec4653145b6d6d1cc67409cec4a36886e68f22d91198fb74579e5db0a4959b123ee3b80c020017376949620dbb18796f8c09867bac3d4730bb7f1476cd11998d4bb2759777fba9e837bd24cfa2d682e5aef169bccfee5ad9ac6f94b989d9f1467cf685f90319b7249fddcdc27824ccbf04a5cbd82649b75623fce40ddc1e69a8e2cb4a99e35eaf6ba3af39a64fc4f4c3fc71aa936b822d3aee1799f680ce6c89eff7dafeffbe5907b93284a5ddbb837c6e87a41495299fe5f2b848ad40d3cbc48181abc2034e96483d231fc6b4520aa099f39bfd8599189bf3bf9df0ae1c0dd56d3e7cda9cc395515c949cd305e87c68eba9721c1b2e8fa2315d990d2c02360f45a5a91cab3012dfc3016762b94f0902622a3383fdeff3dfb17c89070ff30b90e27220da5fcbe69a533492818148cc1b11a492672e87f897f7b995728d4cc42e4f25c5d524663352ea4ce908148b63472bf895b33851a9d83e5c4f3f99e493b80c5648a7a1e594a0fc6ccf385d339dbf8929935baad5ac4ed69424f54788180dce369065d5eed6e90b47379533f2f53dd83b15b7f06a8c8d66dfb98617fe1216d5cc7e9c84be766476febbf5cafad1e61086d4dfe11f15e01eba4c05c99fcfbe603342ca96a47beafc5d1e4a1ca1b2f1491ea0ba39ff53547e49c527c03af84d830b0e13a5febb6c0fcf024805db4351fd0d8064008476085df8e0577a211db93433b29d24c2da8643d24bd9b49a43f8f429ee7d40f14cc20499472bf654c12cdf058bae1f10d5c8a84653069c5f4a0f13d6d2ec20389846f7994671c6673f137ca2b0344fbecf0be9d54d23449468742086d59dd5a51bf62ea6e37f1731b75f8d7f0ce110a56e605c382b13d3026b7a473f3f5a40ad69ec3f4a1d63dde845dca34125a56bc21d15983891e01db0e7940744b24c932d2f92681fce04b6dd7030e05dd29da3aa42c43a9b9f6c5c9ad3b1084f893e8adf8812d41bb845cfcc315eeca67fe7e99833a5cdec7cb42a865ed4642c1b69145dfa9fe7d06aea58865a95cc93a88418e95b0703b7f014fcb50ee4cf2dae79a5d3399983a9b5930662553359d80c7022599c3f4ad2aebe12fd9d7c40d85857c6c4b8dd3e8c8f9cbd805ec58a9febe1cbd74979e5245ffb8e00f55b107b03014727acd9884646f1129a34a74d90b16fafc599f4eb847c5c5a42c02accfecedb52cf61006982d269358a93be19c9a380cde874df0796199cbe20441979b1030ac114751fecd54f2b06dea35dec68099f262737cd20d1dbaebca9f3677145b8542d546a04df2dab2f2ce1df26c9dd29d6a2d67009ef5117d2802a14ac2976010aef4d82812089cb3940e052e01750e73b241f80847f935405796d7bca788ff22acd95e71a49f2e1b44c32842d0af491f147fb46f5e71f75aeed4db432d0e24ba8fea566c1d6cd3e18030edbd4b13dca33281c47b0884f9f708de84865ca3ea7ed9f4849bae996d8685dd2bc0dbf83a2fefc32afa52a5cc6ac3e607197d42b5a25e11f3bc7c3ba4c1036765e88662e9ea8fff293bc988a8e4cdc65fc31b4ce04b1f425cde7fdcbebe67d67fbf45e8f8be3ae3d55a4d2a55c96f3798397d7f846e4721aaa89684eb21ff18f4d232f056f221ba6ed2d563fdbeb8a50edb734cf5429d7ce7e3f667743a205ebcd700a318a0802fc6043da2c50ffb395560fbd9f7b0f7bbecc9eb0d2c03f144779922b266721a05dbddec94bad9e3bbc5a9a1f46bb37e88e0bcfde9d0721fdcf3a2f1bae255dfcdabb7f42ebd30f7523c69b71bd31351e678daf15b5142c7c6d7ea480a37fef533169a15d66298aa2e6cfe4144a6c4502a03f1bcc40856f3ccf37350c4a168185d2fe1797664af2eebcb72039caecb75cf6d2877585472f2299064e2b8cbf630f4c263f7fb3cf38d5356b1da61498447c399c27664e1d94af21994609b14e271b806518ba9c89fee41ae44ccca6d752b8571a843152320a27523f0e27b3ea02cbcb949fadb83a3020e6ea6d9e2206b649c87065739d30fe85cef82b57e63ef3ff61c359c3d2c39de4c6068a6ed90cecc763fcc9c6bc85868a57437fc9512038e7f08dc434ca7f8e5f5860f3532e313846256d9aa41876b46cdf0a470218e5d16f205b3c91aa3bb3dbf136bb64c3f252b256df9aacfe0affe1545a90789b83e40b9e717cf03d97a4468119a82a91be6f2cd5c28a2b18af7a7b05c6d7350b7590649334bebf10560eccb899bfb50e64d4276ced380a892a973572e9b214cbbc34a293fcc9a6eb24347ce6dbd7207725ae08760dfd0cbdcbd247a11a1c4b6047c060c3ea2466f5ceab7cf7976374a19edd6f653b5eaf9304e7d1902893c06f95d395580c34e0f7fe707aa8ea032971d9cb21f7835849e9d870b67f6f509c3cdb06a8ed8518fff1ea0d5471f0bcf95c982319bd49b125afc94105e0ca6519faccbb1a1d18cf7f235389000def1b781035a2539279f612e6da611dac8b8ff8b2405cdf2352c3ca8ff401054a963f165642bdafdd5fb1a3d55c31af996130fceecc055f229ab9b70dfdbe854754082fe3ab0f92d83d224fc06cabebc02334de81c36ebcdaa48bc5c8a6db26c5afd62de0336e1e6053034bc64243ce06e7a55dea6c61aed2ec3013dd889fbb0c1e5b7f5600daac3043027ecb17a091eb9b6c8aa05678ef72175b6326387eb907853e66b7b55a709fefa664ec550b7aa42ca3ad9b3314b06d7cd2b4fa95f3a488c0526ead26e2da77ef71ca2827211970e7159fd8e4e9074837031c0922adb6118d1565347157304504eb671d96893efdc7fa6e3783b3b38ed6044dbfaead6bea2d970be15d750224a14a21b12d7adb3f0c06df5213016de82227be5d26fb58080a19b1ff789a155f98c6610b7e89c00d75fe15455a322f6337138467733107b613d019f9cb93794bfc61664c947805c8c72d59502c830020ac61fcbf5ecc044cb376630fba09942a7558944c7d13ba311ca1ff03b1928e69ace4bd778a1e34f4b24c79503d2eb88e6d893e2edd79f4159c96f7034a0c792dad4330166f5e21ab93b5fe390f835ea1fc32640290a3747fdeba39ec4819eda54e9ec6bafb21c40463d1b2027f5a819d95775bdf81cb668e4ad52e2ae1c986c731966cfe5c9417e558078cb576ed5f054533b0e7db6a5ec03dc885acf4d21b2a696be125c90370d6514cac0d14f318fedd759742a7804d847dedf6a1c4e2dd0e6982422031a813c5423588b91d4508f1406c1186cddd6ac75896569cf62187aa6898c84b08c2fbb0ba6f4abd7873ff69145cc34db87911c21b2ddad6b4e5b0821b6b84c9c59485f4e43f3d9ef270258a16bf58c7207c688fdcac38b35c993cf6fe4fd8884d725e5070330831c1516fde2b40ca09b929a7a635af3b45658c41533824972bdd52c1581dcc7a9202dcd4b64fed03acc25b1e54e06247c1a7cc6e032dc20b0aedc77914560caa7d4a668a30a88a5508fec928abb9b1cc1e742e3d6dddb954e47f4cc784e9ba3b2f058e09d9d9b061749efe8fa341d2a7e33e565f6660b869f9669461e3fe94703b076571fac0ce58463133b7ad79fed7df21c55085d182602d364c190de6dc9b2d949f6abc8033ba69414b18faead20e6d92248d4ff45c75443473fee7dccddad7e436668c95cfa65ec447c0c3bb18a6ce613bf2c57d520c61eb14634f59171f385bb71a61dc3d2cb234a0c381fbc3815090506847a1c50c8fc2787472a99eaba14d71e8c5cd5f4b57020d8fd44e95885263e0b4a6f1afb84d3ab0efcb865fa906e8ded83db4ae612ba3e32b8875771ca725130d81283cac6268d6a7d1cb436201db3bf6d35bb20e881ea7f895c645106c0fc8d027156601ef1733cdeaf83311f93d2cac9af70bd8225e6352641bd0cd853b7eaba71d19d6d0d2c0aa1359401bb7668d085b98c4cb0a9cdb14409e3870b844e51ab0998789536805481b8f2c015739a362f60d3d61f1f8acda53e304f77cf72b66ac52ed22170d593061027797855af139d273a54450ae93442cb0627acfaa0f50cff876f57f62451e22106715bbb17a3ac03b14a4b3e23898d12d5fc8e41b28c583f41e6d5e5a587615c7847cae95a941a8b3b35bda5d3d3fdd19002ba1c2d51c416e859a541a0dce3a33994300c65359d8f3b4fd60b65c82faf951365deca960e3a9397826b029d81fb7b3160f274a9d14307103ccded156747e03f6be9b0822e513344a5c0a7d0878c8de86d1cd7fa6fb67ef6fbb18ced9f39a238877858e7fe4bf8e37b5851fcb70209672d0521024fb9420c6992bf1158a75a101b383c480262da3dfa8c215ff6a5d48a5cb1edf15b34afe90881c90a101dd4b4a8575671130af5211d13ec021c41e2e33fd0af0f5305cb461c1058d0c8243aa5ac5ebba579a8aedaeaae5107742c120ad72352bfa219e50bd26a319f28810e836377112000c42ab31eaf00b367fbdc88d5d7385e555b7ae87ae99735350e7c5f21ed312e946052907905e4c151c9ae3d81fd83951a21104e46e9bead17952da57b43cc928c73b0016e87519abec1218898215070b3d20d5ebacd783bbd3d34903b66f8f924ee94d00c6454344000329b5442083dde0445e8b5c598a51470e5120eac28216989b102caa7bf88a5053433a61465dcc349320a9dba8a0a830f74d3d97e36f914d2840832f6fc3c2e0cde7a2ecff7a97ebe82c2bfe50cabbc5bf6da4b593eef63b194cdda7bbda7ba934ef4477a22202083c8784704491244d94dba36f7ba6a8025a23853481bfa055c25f61c142e405f06f45e83b75f961158b41e8f2574fdc93b917a4253bfb3571b4224f7fead4080d39a49d3a87da5f2984b5457478da223842d9c58507d9e455d88f5b4d000cf56cfb4979b623a278d58f05a3821f28f95a29067456b3ba0ce1e06896193e778963ebdfb409111dfac93beafca4aaea8aff5b8e2446054da973684ff7995fb138460235175df375206d103ecb88194cc53c75dea2a56a27b494e05151f74e1c5b1a4d9870e306fef383b189a1170ab741757e0b476a0580b05fe40d4c54e28073c1ce3c1d6200c64840e4c4a64de5125fab103288267b59338494364f62254aea5e1a8907e66685de05ccbd56ca062206c196643d0980000154d407bc057fa0a24c3310ccb125973a2606d402e585c31a33944efeaa517553ce5e210cf7c17d032782499fc0b5dd0d02bcfea7b4d6fc04a76f5b85dbfab99e7d47b8a240757e1a8eeca49acb12045c2800334546f757a7704a99e45ec69ae539f62c87e8ae195a87bad62d2770a6322dda26a0172b4e73dc0f1dcab404579da891b938702a803032add33ccdb958ae91495a6ecabc38f73d6f09c575aa1891bb40e85e93b17afee6416a4d4e804ba1077f38158eb076e3861a6470f60ca2db059c3b0bc62e15e4724b59b82efdc16493a8f7b3abe474cf5d1ecf0252b554d65b6aaa08c6c1c3029409ab9ee1a0cca031d5c52101e44bd3857e472373eef0e62158f72ead27c256a9e2404fe5ba2841089211af9f6500fdda8cc6402c74f888080da9b0f2502daf025fc03d5f650d4b132bf2e6a0e6b7a82c646ff14b9b318631e1f17659d6e904413ef3cbca6d1f073358fb182df71d7064b271e92c7ab26a1e7761f4882b0d5806b632d56a5837a0707bef1eef288aad039f6f0b5922a617f64019969aeb335bbd80ac58529e6371125dd73db14a5cc8831c636844979dae8710a4976ed7a1a5f", "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"}) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r7, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x4) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x94, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf14eb7e4af77fe67}, [@IFLA_LINKINFO={0x24, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7}]]}}}, @IFLA_PORT_SELF={0x34, 0x19, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "8e6c793985539a18e92083fdf1c71d5a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5ddcb9337ee911b300fb6f7178266b4c"}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x1f}]}, @IFLA_BROADCAST={0xc, 0x2, @random="34710d84f6f9"}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x80000001}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x94}}, 0x0) 23:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xead1fa20255127f5}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x6}]}}}]}, 0x3c}}, 0x0) 23:01:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:31 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r0, 0x0, 0x8000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f9048a453995c937ff868c57afb98de2e6cf510f38f37a827b9b779b94b9f82df10e5dc7f94eace7331", 0xff9d, 0x0, 0x0, 0x0) 23:01:31 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r0, 0x0, 0x8000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f9048a453995c937ff868c57afb98de2e6cf510f38f37a827b9b779b94b9f82df10e5dc7f94eace7331", 0xff9d, 0x0, 0x0, 0x0) [ 449.546045][T23402] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 449.603834][T23402] device bond1 entered promiscuous mode [ 449.610215][T23402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.620240][T23399] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 449.636743][ T3903] usb 5-1: new high-speed USB device number 7 using dummy_hcd 23:01:31 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r0, 0x0, 0x8000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f9048a453995c937ff868c57afb98de2e6cf510f38f37a827b9b779b94b9f82df10e5dc7f94eace7331", 0xff9d, 0x0, 0x0, 0x0) 23:01:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x20, 0x0) [ 449.882240][ T3903] usb 5-1: Using ep0 maxpacket: 8 23:01:32 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r0, 0x0, 0x8000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f9048a453995c937ff868c57afb98de2e6cf510f38f37a827b9b779b94b9f82df10e5dc7f94eace7331", 0xff9d, 0x0, 0x0, 0x0) 23:01:32 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 450.012366][ T3903] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 450.012425][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.020780][ T3903] usb 5-1: config 0 has no interface number 0 [ 450.028670][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 450.034591][ T3903] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 450.051252][ T3903] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 23:01:32 executing program 1: r0 = socket$inet(0x2, 0x4000000003, 0x8000000004) getsockopt(r0, 0x0, 0x400000000ce, 0x0, 0xfffffffffffffffe) [ 450.062608][ T3903] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 450.071765][ T3903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.110059][T23526] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 450.145674][ T3903] usb 5-1: config 0 descriptor?? [ 450.210763][ T3903] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 450.222851][ T3903] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input31 [ 450.387673][T11399] usb 5-1: USB disconnect, device number 7 [ 450.402267][T11399] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 450.812446][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.812639][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 451.232108][ T3903] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 451.472122][ T3903] usb 5-1: Using ep0 maxpacket: 8 [ 451.602512][ T3903] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 451.610840][ T3903] usb 5-1: config 0 has no interface number 0 [ 451.617155][ T3903] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 451.628319][ T3903] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 451.639550][ T3903] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 451.648756][ T3903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.658633][ T3903] usb 5-1: config 0 descriptor?? [ 451.707512][ T3903] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 451.719220][ T3903] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input32 [ 451.905237][ T3903] usb 5-1: USB disconnect, device number 8 [ 451.922203][ T3903] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 23:01:34 executing program 4: syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f00000000c0)={{0x12, 0x1, 0x428, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@network_terminal]}, {[{}]}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0xf, &(0x7f0000000000)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}]}, 0x271}) 23:01:34 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) 23:01:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0x14, 0x207, 0x0, 0x0, {0x40000010, 0xf0ffff, 0x600}}, 0x14}}, 0x0) 23:01:34 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r0, 0x0, 0x8000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f9048a453995c937ff868c57afb98de2e6cf510f38f37a827b9b779b94b9f82df10e5dc7f94eace7331", 0xff9d, 0x0, 0x0, 0x0) 23:01:34 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r0, 0x0, 0x8000, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000002440)="0501000008003e0000000200c52cf7c25975e605b02f0800eb2b2ff4dac8897c6b068777faffffff306609000000c5471d130a66321a54e7df305f80a88161b6fd8f24feffff31772f40cfc482d71398d9837b809502639f9048a453995c937ff868c57afb98de2e6cf510f38f37a827b9b779b94b9f82df10e5dc7f94eace7331", 0xff9d, 0x0, 0x0, 0x0) 23:01:34 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0x3472abd886cb49f7}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="3e2e650f011a650f01c566b852054ae40f23c00f21f86635020004000f23f80f005ef20f20e06635400000000f22e0baf80c66b82c3e758866efbafc0c66b8f900000066ef66b899ac32680f23d80f21f86635400000600f23f8660f388148e1f30fa7d066b88000c0fe0f23c00f21f86635010003000f23f8", 0x79}], 0x1, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:01:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000030000000800010062706600180002000800040000000000040005000800080004000000"], 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) [ 452.570669][T23684] user requested TSC rate below hardware speed [ 452.635976][T23702] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 23:01:34 executing program 5: r0 = socket$inet6(0xa, 0x4001008000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00\x03\x00', &(0x7f0000000000)=@ethtool_ringparam={0x8}}) [ 452.680021][T23748] user requested TSC rate below hardware speed [ 452.682113][ T3903] usb 5-1: new low-speed USB device number 9 using dummy_hcd 23:01:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x303) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x4, 0x0, &(0x7f00000002c0)}) 23:01:34 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) read(r1, &(0x7f0000000500)=""/202, 0xca) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xfffffc79) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) tkill(r0, 0x1000000000016) 23:01:34 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) [ 453.152529][ T3903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.402435][ T3903] usb 5-1: string descriptor 0 read error: -22 [ 453.409014][ T3903] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.418319][ T3903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.464324][ T3903] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 453.665654][ T3903] usb 5-1: USB disconnect, device number 9 [ 454.432135][T11397] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 454.872261][T11397] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.132349][T11397] usb 5-1: string descriptor 0 read error: -22 [ 455.138826][T11397] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.148359][T11397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.204517][T11397] cdc_ether: probe of 5-1:1.0 failed with error -22 23:01:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r1, &(0x7f0000000280)="200000001a00010400000066835f7f081c000013004b4542c7b5cf3b28151dc3", 0x20) 23:01:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) 23:01:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/106, 0x6a}], 0x1) close(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) 23:01:37 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x40002014}) 23:01:37 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x20005]) [ 455.404216][T11397] usb 5-1: USB disconnect, device number 10 23:01:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x22, 0x2, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) 23:01:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 23:01:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0xfffffffffffffe5a}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3fffffffffffe81, 0x0) 23:01:37 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0xcdd0, 0x4, 0x4, 0x400, {}, {0x2, 0xe, 0x3, 0x1f, 0xd8, 0x8, "44d0d383"}, 0x20, 0x0, @planes=&(0x7f0000000040)={0x3, 0x5, @fd=r0, 0x5}, 0x4}) 23:01:37 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:37 executing program 1: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r0}) recvmmsg(r2, &(0x7f0000006e00)=[{{0x0, 0x212, 0x0}}], 0x400000000000039, 0x0, &(0x7f00000000c0)) dup2(r1, r2) write(0xffffffffffffffff, &(0x7f00000000c0)="6963e64243ea486da3a74e3d", 0xc) tkill(r0, 0x15) 23:01:37 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) 23:01:38 executing program 3: syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1000000200000582) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000040)={0x0, @raw_data="71ec5a74b37cc1aa00995c214b4bbdc1e37e15316e3f25d55ac7fdc7453f9a5ba18cd563253adb96321c445d9f39e53044945878039086267d7e31bdeb16c488baecbaef1a37b2ae897dbff6dad98034517e7d962d9820bc6a43e3f06cbc1ae8dfde483692e134e09379e60ba1c4966dc0c7edb3bb3059113a07bc6e36edb6a7604095ab6b2ef3e2d64370924f61bec9c59ce98ce4c88f291c5b879852cdb44aa4803978d454051765d3cdef67a3b18d2f1f94b576a190e75bff5a1295607434a228eace9f7c7964"}) write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x3e3}) 23:01:38 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7f, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x59455247, 0x0, 0x0, 0x0, @stepwise}) 23:01:38 executing program 0: r0 = semget$private(0x0, 0x9, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/32) 23:01:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000d80)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc008ae88, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000040)="08a241055e0bcfe87b0071") dup2(r3, r2) 23:01:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:38 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x19403, 0x0) 23:01:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 23:01:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @rand_addr=0x7fffffff}}) 23:01:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) [ 456.527759][T24164] user requested TSC rate below hardware speed 23:01:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$sock_int(r0, 0x1, 0xa, 0x0, &(0x7f0000000040)) 23:01:38 executing program 1: capset(&(0x7f0000000400)={0x19980330}, &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) 23:01:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:39 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x0) 23:01:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="280000001200010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000f3708292f400000000000"], 0x28}}, 0x0) 23:01:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 23:01:39 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x21d, 0x372) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x47) 23:01:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 23:01:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e005f0014f9f407000904000700000001000000000000000800010000000000", 0x24) 23:01:39 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:39 executing program 1: syz_emit_ethernet(0x300300, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300028, 0x0, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 23:01:39 executing program 5: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) close(r0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x40000000085, &(0x7f0000000040)=0x0) fcntl$setstatus(r0, 0x4, 0x44800) write$nbd(r1, &(0x7f0000000000), 0x10) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}]) 23:01:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e005f0014f9f407000904000700000001000000000000000800010000000000", 0x24) 23:01:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 23:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_NUM_RX_QUEUES={0x8}]}, 0x40}}, 0x0) 23:01:39 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 23:01:40 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 23:01:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e005f0014f9f407000904000700000001000000000000000800010000000000", 0x24) 23:01:40 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 23:01:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000340)) 23:01:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e005f0014f9f407000904000700000001000000000000000800010000000000", 0x24) 23:01:40 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 23:01:40 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x6, 0x1, {0x5, @sdr}}) 23:01:40 executing program 3: unshare(0x20600) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0185879, 0x0) 23:01:40 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:40 executing program 0: r0 = timerfd_create(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000140), &(0x7f0000af9ff0)) 23:01:40 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 23:01:40 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x6, 0x1, {0x5, @sdr}}) 23:01:40 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @rand_addr="3e3cae2802d6a590bbccaaec56df41f0"}}, 0x5c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f0000007a00)=[{&(0x7f0000006680)="ead62397ae403560dd8ef3891243a22e7aea1bf3f86f08c2054993b55d0deb618307674b0ab55fc0df99b26784bdea968a9cfbda5e94b6718b74e311de3c11c6b204fea98479d9341b1a67873b25", 0x4e}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x400007}, 0x133) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 23:01:40 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x1a, 0x1}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='='], 0x1}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:01:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="215c843a5b6ec8d0cf485e51e4883e28"}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ff08040402400100fe8000000000000000bbff010000000000000000000000009c3b6320b0000100000000000000000000000000000001fe880000000000000000000000000001000000000000"], 0x48) listen(r0, 0x2003) accept(r0, 0x0, 0x0) [ 458.972537][T24693] user requested TSC rate below hardware speed 23:01:41 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x6, 0x1, {0x5, @sdr}}) 23:01:41 executing program 0: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'rmd320-generic\x00'}}) 23:01:41 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x10000000000020, 0x0, 0x0, 0xffff7ffffffff034}, {0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x0, 0x0, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}}, 0x0) 23:01:41 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x6, 0x1, {0x5, @sdr}}) 23:01:41 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) [ 459.338070][T24807] user requested TSC rate below hardware speed 23:01:41 executing program 0: unshare(0x40600) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x4000000000089f2, &(0x7f0000000140)={'sit0\x00\x00\x00\x10\x00', @ifru_hwaddr=@random="e7d696a5d690"}) 23:01:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000000e0ffff460000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0xfd, 0x0, 0x0, 0x0, 0x0, 0x3}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_CLASSID={0x8}]}}]}, 0x4c}}, 0x0) 23:01:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x40}, 0x3c) 23:01:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') lseek(r2, 0x0, 0x0) 23:01:41 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd1e}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600203f00000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000e2ffffffff00170000000000000000"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000008a, 0x0) 23:01:41 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 23:01:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="215c843a5b6ec8d0cf485e51e4883e28"}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ff08040402400100fe8000000000000000bbff010000000000000000000000009c3b6320b0000100000000000000000000000000000001fe880000000000000000000000000001000000000000"], 0x48) listen(r0, 0x2003) accept(r0, 0x0, 0x0) 23:01:42 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f038b0503000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 23:01:42 executing program 0: syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, 0x10) syz_usb_connect(0x2, 0x0, 0x0, 0x0) 23:01:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:42 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 23:01:42 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x8002) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0x810c5701, &(0x7f0000000040)) [ 460.095145][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:01:42 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 23:01:42 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f038b0503000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 23:01:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:42 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f038b0503000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 460.337235][T25060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:01:42 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x8002) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0x810c5701, &(0x7f0000000040)) 23:01:42 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r1, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) [ 460.460393][T25072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:01:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="215c843a5b6ec8d0cf485e51e4883e28"}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ff08040402400100fe8000000000000000bbff010000000000000000000000009c3b6320b0000100000000000000000000000000000001fe880000000000000000000000000001000000000000"], 0x48) listen(r0, 0x2003) accept(r0, 0x0, 0x0) 23:01:42 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f038b0503000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 460.962509][T25192] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:01:43 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0}) 23:01:43 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x8002) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0x810c5701, &(0x7f0000000040)) 23:01:43 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x0, 0x883e, 0x8}}}}}}, 0x0) 23:01:43 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x4, 0x0, 0x0) [ 461.310450][T25198] net_ratelimit: 8 callbacks suppressed [ 461.310484][T25198] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 [ 461.338489][T25202] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 461.339861][T25198] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 23:01:43 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x0, 0x883e, 0x8}}}}}}, 0x0) 23:01:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0x701, 0x0, 0x0, {}, [@nested={0xc, 0x0, [@typed={0x8, 0x4, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) 23:01:43 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x8002) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0x810c5701, &(0x7f0000000040)) 23:01:43 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000019007f5300fe01b2a4a280930a60ffff00a84302910000003900090008000c00060000f3180015e005000600000000dc1320d544070000000000059f06d20072660a4427957c2b64000000000000000000", 0x55}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c0001000000", 0x28}], 0x1}, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) 23:01:43 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x0, 0x883e, 0x8}}}}}}, 0x0) 23:01:43 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="215c843a5b6ec8d0cf485e51e4883e28"}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ff08040402400100fe8000000000000000bbff010000000000000000000000009c3b6320b0000100000000000000000000000000000001fe880000000000000000000000000001000000000000"], 0x48) listen(r0, 0x2003) accept(r0, 0x0, 0x0) 23:01:43 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000003e00)="0f", 0x1, 0x8000, 0x0, 0x0) syz_emit_ethernet(0xc5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = dup(r0) write$cgroup_int(r1, &(0x7f0000000340), 0x12) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 23:01:43 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000932ae508d8120100c7010000000109021b000100000000090405b1c5c7bc1b93a80501124500000000873280c99c8abd12443285e98ce79497736ada9d3b5fa68f066059f2e4f571e89bfebd248acffe8f037d216d6886559fc876070a674f957cfdbc40bb7885e0ae46936ee1aa19734553bfbefc66f6ad8b02e859d16bc00d6c9c305c2681be4e3289bd5c5408de6a6746f77707b125db9f86ac1dba912fd6c86056eb7bcf006eebfdc508ae87f5298dea37da76aa3a"], 0x0) 23:01:43 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 461.847777][T25327] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x5 23:01:44 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 23:01:44 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x0, 0x883e, 0x8}}}}}}, 0x0) 23:01:44 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000003e00)="0f", 0x1, 0x8000, 0x0, 0x0) syz_emit_ethernet(0xc5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = dup(r0) write$cgroup_int(r1, &(0x7f0000000340), 0x12) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 23:01:44 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) [ 462.215387][ T3903] usb 4-1: new high-speed USB device number 21 using dummy_hcd 23:01:44 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000003e00)="0f", 0x1, 0x8000, 0x0, 0x0) syz_emit_ethernet(0xc5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = dup(r0) write$cgroup_int(r1, &(0x7f0000000340), 0x12) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 23:01:44 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 462.292080][T25451] user requested TSC rate below hardware speed 23:01:44 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 462.462761][ T3903] usb 4-1: Using ep0 maxpacket: 8 23:01:44 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000003e00)="0f", 0x1, 0x8000, 0x0, 0x0) syz_emit_ethernet(0xc5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = dup(r0) write$cgroup_int(r1, &(0x7f0000000340), 0x12) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) [ 462.534557][T25451] user requested TSC rate below hardware speed [ 462.582429][ T3903] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 462.591313][T25451] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.599261][ T3903] usb 4-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 462.609974][ T3903] usb 4-1: config 0 has no interface number 0 [ 462.616269][ T3903] usb 4-1: too many endpoints for config 0 interface 5 altsetting 177: 197, using maximum allowed: 30 [ 462.627466][ T3903] usb 4-1: config 0 interface 5 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 197 [ 462.641122][ T3903] usb 4-1: config 0 interface 5 has no altsetting 0 [ 462.647968][ T3903] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.c7 [ 462.657192][ T3903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.659346][T25451] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.684035][ T3903] usb 4-1: config 0 descriptor?? 23:01:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000f"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) 23:01:44 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 462.880078][T25476] user requested TSC rate below hardware speed [ 462.909412][T25476] user requested TSC rate below hardware speed [ 462.962458][ T3903] usb 4-1: string descriptor 0 read error: -71 [ 462.988462][ T3903] usb 4-1: USB disconnect, device number 21 [ 463.712126][T11397] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 463.962063][T11397] usb 4-1: Using ep0 maxpacket: 8 [ 464.082456][T11397] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 464.090946][T11397] usb 4-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 464.101699][T11397] usb 4-1: config 0 has no interface number 0 [ 464.107992][T11397] usb 4-1: too many endpoints for config 0 interface 5 altsetting 177: 197, using maximum allowed: 30 [ 464.119601][T11397] usb 4-1: config 0 interface 5 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 197 [ 464.133084][T11397] usb 4-1: config 0 interface 5 has no altsetting 0 [ 464.140487][T11397] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.c7 [ 464.150088][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.160791][T11397] usb 4-1: config 0 descriptor?? [ 464.442518][T11397] usb 4-1: string descriptor 0 read error: -71 [ 464.457615][T11397] usb 4-1: USB disconnect, device number 22 23:01:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0}) 23:01:46 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 23:01:46 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) syz_open_procfs(0x0, &(0x7f0000272000)) 23:01:46 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000f"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) 23:01:46 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 465.005818][T25488] user requested TSC rate below hardware speed [ 465.023447][T25495] user requested TSC rate below hardware speed [ 465.041801][T25498] binder: 25497:25498 unknown command -1 [ 465.047920][T25498] binder: 25497:25498 ioctl c0306201 20000600 returned -22 23:01:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000200)) 23:01:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000f"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) 23:01:47 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000100007041dfffd946f6105000200000a1f0700070028080008001e0004001000", 0x24}], 0x1}, 0x0) 23:01:47 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x1c}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @local, @loopback}, "0020010000000000"}}}}}, 0x0) [ 465.334336][T25561] user requested TSC rate below hardware speed 23:01:47 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) [ 465.416239][T25597] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 465.445379][T25613] user requested TSC rate below hardware speed 23:01:47 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000f"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) 23:01:47 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x1c}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @local, @loopback}, "0020010000000000"}}}}}, 0x0) 23:01:47 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0204000a0e000000030000000000000005000600000000000a0000000001000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a002a3dbbb689620900000000000800000000000000aa000000ff1700400000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40002ee, 0x0) [ 465.588086][T25619] user requested TSC rate below hardware speed 23:01:47 executing program 4: syz_open_procfs(0x0, &(0x7f00000011c0)='\x00\x10\x00\x00\x00\x00\x00\x00s\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000008980)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 23:01:47 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x1c}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @local, @loopback}, "0020010000000000"}}}}}, 0x0) [ 465.804210][T25631] user requested TSC rate below hardware speed 23:01:48 executing program 1: r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='sync\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='lazytime\x00', 0x0, 0x0) 23:01:48 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 23:01:48 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x74, 0x1a, 0xde, 0x0, 0x586, 0x341f, 0xe797, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0x20010134}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2) 23:01:48 executing program 4: r0 = socket$inet(0x2, 0x100000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x14, &(0x7f0000745ffc), &(0x7f0000b96000)=0x4) 23:01:48 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x1c}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @local, @loopback}, "0020010000000000"}}}}}, 0x0) [ 466.116273][T25683] user requested TSC rate below hardware speed [ 466.176591][T25737] sctp: [Deprecated]: syz-executor.4 (pid 25737) Use of int in max_burst socket option. [ 466.176591][T25737] Use struct sctp_assoc_value instead 23:01:48 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @ether_spec={@dev, @broadcast}, {0x0, @remote}, @hdata="8a3bd44f9be186c0fdc77ccd96a0b53c97c22a7b9e967f804da3c571cb4f5be14731fa990c221a396e81f4c1ab9cdaff7f504134", {0x0, @local}}}}) 23:01:48 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:48 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '?'}, 0x119) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000980)="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", 0xe00}], 0x1) write$P9_RREADLINK(r1, &(0x7f0000000240)=ANY=[], 0xc9) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7}, 0x7) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18}, 0x18) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 23:01:48 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0}, 0x40) 23:01:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) set_mempolicy(0x4, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x44031, 0xffffffffffffff9c, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/fib_triestat\xa8\xf7\x16_r\xd3\x91\xd8\x1c\xb1Z\x83\x00') 23:01:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$tipc(r5, &(0x7f0000000000)={&(0x7f0000000040), 0x10, 0x0}, 0x0) [ 466.502228][ T3903] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 466.510693][T11397] hid-generic 0000:0000:0000.000C: item fetching failed at offset -754067167 [ 466.520002][T11397] hid-generic: probe of 0000:0000:0000.000C failed with error -22 23:01:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) munlockall() 23:01:48 executing program 0: r0 = inotify_init1(0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioprio_get$pid(0x2, r2) [ 466.774449][ T3903] usb 4-1: device descriptor read/64, error 18 23:01:48 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0x66, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) [ 467.162166][ T3903] usb 4-1: device descriptor read/64, error 18 [ 467.432105][ T3903] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 467.702131][ T3903] usb 4-1: device descriptor read/64, error 18 [ 468.092246][ T3903] usb 4-1: device descriptor read/64, error 18 [ 468.212427][ T3903] usb usb4-port1: attempt power cycle [ 468.922532][ T3903] usb 4-1: new high-speed USB device number 25 using dummy_hcd 23:01:51 executing program 3: r0 = socket(0x6000000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xe, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffe01}}]}}]}, 0x444}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492502, 0x0) 23:01:51 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x7, &(0x7f0000a9cff8)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(0x0) 23:01:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:51 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x7f\xff\xff\xff\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x608) 23:01:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) io_setup(0x9, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x343, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xe}]) 23:01:51 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x1ff) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000780)="92515ccf") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 469.165695][T25907] x_tables: eb_tables: snat target: only valid in nat table, not nat [ 469.169530][T25910] user requested TSC rate below hardware speed [ 469.206144][T25916] x_tables: eb_tables: snat target: only valid in nat table, not nat 23:01:51 executing program 4: unshare(0x400) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2286, 0xfffffffffffffffd) 23:01:51 executing program 0: r0 = socket$inet(0x2, 0x20008000000003, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb}, 0xb) [ 469.333908][T25924] user requested TSC rate below hardware speed 23:01:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) io_setup(0x9, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x343, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xe}]) 23:01:51 executing program 3: r0 = socket(0x6000000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xe, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffe01}}]}}]}, 0x444}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492502, 0x0) 23:01:51 executing program 4: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x80, "d2c480e29e9368bd9f693522a0eea7b5d2a9f14d6f46d9bc812eea7648f069aaf033c18c51e069df5c0b48270bbd74fe200e9d6b66892eb7f29a9e9962b5f2c0582388bfa39d970771f9a2d020091a27ea14c42a92b6d8b07d0e93e6e277ab99ab0c39b073e2b9d0abd95a965e23a629602e7240ea8f6f3dc301edc4b52abdce"}, 0x0) r0 = socket(0x1e, 0x805, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2}, 0x8) 23:01:51 executing program 0: r0 = socket$inet(0x2, 0x20008000000003, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb}, 0xb) 23:01:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) 23:01:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) io_setup(0x9, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x343, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xe}]) [ 469.805190][T26040] sctp: [Deprecated]: syz-executor.4 (pid 26040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.805190][T26040] Use struct sctp_sack_info instead 23:01:51 executing program 0: r0 = socket$inet(0x2, 0x20008000000003, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb}, 0xb) 23:01:52 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f407000000000a020000000000000000000000002000", 0x20) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/184, 0xb8}], 0x2}}], 0x8, 0x0, 0x0) 23:01:52 executing program 3: r0 = socket(0x6000000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xe, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffe01}}]}}]}, 0x444}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492502, 0x0) 23:01:52 executing program 4: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x80, "d2c480e29e9368bd9f693522a0eea7b5d2a9f14d6f46d9bc812eea7648f069aaf033c18c51e069df5c0b48270bbd74fe200e9d6b66892eb7f29a9e9962b5f2c0582388bfa39d970771f9a2d020091a27ea14c42a92b6d8b07d0e93e6e277ab99ab0c39b073e2b9d0abd95a965e23a629602e7240ea8f6f3dc301edc4b52abdce"}, 0x0) r0 = socket(0x1e, 0x805, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2}, 0x8) 23:01:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) io_setup(0x9, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r2, 0x343, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xe}]) 23:01:52 executing program 0: r0 = socket$inet(0x2, 0x20008000000003, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb}, 0xb) [ 470.178666][T26098] sctp: [Deprecated]: syz-executor.4 (pid 26098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.178666][T26098] Use struct sctp_sack_info instead 23:01:52 executing program 3: r0 = socket(0x6000000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xe, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffe01}}]}}]}, 0x444}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492502, 0x0) 23:01:52 executing program 4: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x80, "d2c480e29e9368bd9f693522a0eea7b5d2a9f14d6f46d9bc812eea7648f069aaf033c18c51e069df5c0b48270bbd74fe200e9d6b66892eb7f29a9e9962b5f2c0582388bfa39d970771f9a2d020091a27ea14c42a92b6d8b07d0e93e6e277ab99ab0c39b073e2b9d0abd95a965e23a629602e7240ea8f6f3dc301edc4b52abdce"}, 0x0) r0 = socket(0x1e, 0x805, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2}, 0x8) 23:01:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xb5, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x807}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 23:01:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7c, 0x0, [0x2ff, 0x2]}) 23:01:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001600)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000001640)) [ 470.569368][T26180] sctp: [Deprecated]: syz-executor.4 (pid 26180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.569368][T26180] Use struct sctp_sack_info instead [ 470.652465][T26185] user requested TSC rate below hardware speed [ 470.664902][T26186] bridge1: port 1(veth13) entered blocking state [ 470.671447][T26186] bridge1: port 1(veth13) entered disabled state [ 470.679789][T26186] device veth13 entered promiscuous mode 23:01:52 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) getpeername(r0, 0x0, 0x0) 23:01:52 executing program 3: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2}}, 0xc2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x4000a}, 0x19f) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 23:01:52 executing program 4: getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x80, "d2c480e29e9368bd9f693522a0eea7b5d2a9f14d6f46d9bc812eea7648f069aaf033c18c51e069df5c0b48270bbd74fe200e9d6b66892eb7f29a9e9962b5f2c0582388bfa39d970771f9a2d020091a27ea14c42a92b6d8b07d0e93e6e277ab99ab0c39b073e2b9d0abd95a965e23a629602e7240ea8f6f3dc301edc4b52abdce"}, 0x0) r0 = socket(0x1e, 0x805, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2}, 0x8) 23:01:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80803, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) [ 470.926120][T26247] bridge1: port 2(veth15) entered blocking state [ 470.933600][T26247] bridge1: port 2(veth15) entered disabled state [ 470.941822][T26247] device veth15 entered promiscuous mode [ 470.968717][T26281] sctp: [Deprecated]: syz-executor.4 (pid 26281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.968717][T26281] Use struct sctp_sack_info instead 23:01:53 executing program 1: syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @link_local, [{}], {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @local, "", @remote, "9285d939dcb5f880d8cc3a4eeffc2866"}}}}, 0x0) 23:01:53 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:01:53 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 23:01:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xb5, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x807}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 23:01:53 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$vnet(r0, &(0x7f0000000040)={0x1, {&(0x7f00000001c0)=""/210, 0xd2, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f0000000540)=""/80, 0x50, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000000000)=""/24, 0x18, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x142, 0x0, 0x0, 0x3}}, 0x68) 23:01:53 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="ecee8b1483f4"}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 471.383862][T26305] syz-executor.0 (26305) used greatest stack depth: 52584 bytes left [ 471.413378][T26319] bridge2: port 1(veth17) entered blocking state [ 471.419985][T26319] bridge2: port 1(veth17) entered disabled state [ 471.428406][T26319] device veth17 entered promiscuous mode 23:01:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80803, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) [ 471.612357][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 471.612461][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 471.619007][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 471.625116][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:01:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000380)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x6, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f91468f0"}, 0x0, 0x0, @offset, 0x4}) 23:01:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xb5, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x807}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 23:01:54 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) preadv(r0, &(0x7f00000002c0), 0x20b, 0x0) 23:01:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 471.942500][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 471.948805][ C1] protocol 88fb is buggy, dev hsr_slave_1 23:01:54 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x5646, 0x0) [ 472.017460][T26442] bridge3: port 1(veth19) entered blocking state [ 472.024075][T26442] bridge3: port 1(veth19) entered disabled state [ 472.032339][T26442] device veth19 entered promiscuous mode [ 472.190062][T26452] Sensor A: ================= START STATUS ================= [ 472.198315][T26452] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 472.204991][T26452] v4l2-ctrls: Sensor A: Vertical Flip: false [ 472.211043][T26452] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 472.217353][T26452] v4l2-ctrls: Sensor A: Brightness: 128 [ 472.223058][T26452] v4l2-ctrls: Sensor A: Contrast: 128 [ 472.228497][T26452] v4l2-ctrls: Sensor A: Hue: 0 [ 472.233458][T26452] v4l2-ctrls: Sensor A: Saturation: 128 23:01:54 executing program 3: write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32]]], 0x8) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000040)="ad26635010ffd0e2", 0xfe, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={'crct10dif\x00'}}) [ 472.239093][T26452] Sensor A: ================== END STATUS ================== 23:01:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xb5, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x807}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 23:01:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80803, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) [ 472.491733][T26473] bridge4: port 1(veth21) entered blocking state [ 472.498482][T26473] bridge4: port 1(veth21) entered disabled state [ 472.506911][T26473] device veth21 entered promiscuous mode 23:01:54 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)='\f', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0xfffffffffffffed6, &(0x7f0000001540), 0x321}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1}}], 0x2, 0x10001, 0x0) 23:01:54 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x5646, 0x0) [ 472.786307][T26571] Sensor A: ================= START STATUS ================= [ 472.794412][T26571] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 472.800992][T26571] v4l2-ctrls: Sensor A: Vertical Flip: false [ 472.807142][T26571] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 472.813482][T26571] v4l2-ctrls: Sensor A: Brightness: 128 [ 472.819247][T26571] v4l2-ctrls: Sensor A: Contrast: 128 [ 472.824822][T26571] v4l2-ctrls: Sensor A: Hue: 0 [ 472.829657][T26571] v4l2-ctrls: Sensor A: Saturation: 128 23:01:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:54 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)='\f', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0xfffffffffffffed6, &(0x7f0000001540), 0x321}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1}}], 0x2, 0x10001, 0x0) [ 472.835423][T26571] Sensor A: ================== END STATUS ================== 23:01:55 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='map\x00\x02N\xd1\x1de\xf2-R\xc6\f\x86\xdf\xc9\xfc\x8c]\x02\xc3B\vg\x8f\xa5\x04\x00\x00\x00\xd8\x00\xb2a\xf0\xfa\xcb\xa03\x15\xcd\a\xfb\x140\x12\xd4z\x1b-\xcb&\xdcY\x92\xf6j\xae\x80\x0f\x836\xaf\xd3g\xf8Z\x19\x96o\x9c\xe8\v\xcf\xd6\x9c\'f\xc9\xb3\f\xf8n:\x16!e\x83\xa8\xde\x11~\xf3\xa8\x05\xbc\x14{\xa8\x03\x04\xb1\xcb\aV\x83\xf5\xcd)Z\x05\x98\xd1\n\xf7\x88\x0f\xc40\x1b\xa6\xce\xff\xf6=D\x05\x8bC\xd5\x12\x02\x00\x00\xa7\xedW\xba?M\xdeuir\xaa@M\x9b\xee\"\xff\xe9t\xef\xbc\xce\x8d\xa6\xae\xa6&\x8c\x96\xfb\xce\xc2W\xf3\xa5j{G\xa8d2\x87#\xd4Q\xb6u\x8dT(\xc0\x00\x1d\x00\x00\xe3\x00\x00\x00\xec\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002!\xd7cK\x1d\xc0\x06\x18\xb6/\r\xf9\x95D\x18\xe3\xe6!I\x81\xe39\xe8\x0ez\x95n\xd8\x93\xf9\xcbt\xedF\xaf\xb1\x02\x11u{q\xf2\x13;\x83\x00'}, 0x10) 23:01:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80803, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 23:01:55 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x5646, 0x0) 23:01:55 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)='\f', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0xfffffffffffffed6, &(0x7f0000001540), 0x321}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1}}], 0x2, 0x10001, 0x0) [ 473.230890][T26615] Sensor A: ================= START STATUS ================= [ 473.238671][T26615] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 473.245450][T26615] v4l2-ctrls: Sensor A: Vertical Flip: false [ 473.251505][T26615] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 473.257872][T26615] v4l2-ctrls: Sensor A: Brightness: 128 [ 473.263667][T26615] v4l2-ctrls: Sensor A: Contrast: 128 [ 473.269102][T26615] v4l2-ctrls: Sensor A: Hue: 0 [ 473.274048][T26615] v4l2-ctrls: Sensor A: Saturation: 128 23:01:55 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000100)=0x8) [ 473.279702][T26615] Sensor A: ================== END STATUS ================== [ 473.364669][T26695] IPVS: ftp: loaded support on port[0] = 21 23:01:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000100)) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x2f, 0x0, 0x0, 0x10001f, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0xaaaaaaaaaaaae88, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="b9000400000f3266ba430066eddc0f0f01c442c20100b9050400000f32430f01c2c482198e5200c4e16d75572ab9800000c00f3235001000000f30", 0x3b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0, 0x289}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:01:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:01:59 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)='\f', 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0xfffffffffffffed6, &(0x7f0000001540), 0x321}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1}}], 0x2, 0x10001, 0x0) 23:01:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) 23:01:59 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x5646, 0x0) 23:01:59 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r2, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x0, 0x0, &(0x7f0000350ffc)) r4 = accept4(r1, 0x0, 0x0, 0x0) splice(r4, 0x0, r0, 0x0, 0x200080000005, 0x0) [ 477.529187][T26712] Sensor A: ================= START STATUS ================= [ 477.537451][T26712] v4l2-ctrls: Sensor A: Test Pattern: 75% Colorbar [ 477.544365][T26712] v4l2-ctrls: Sensor A: Vertical Flip: false [ 477.550701][T26712] v4l2-ctrls: Sensor A: Horizontal Flip: false [ 477.557031][T26712] v4l2-ctrls: Sensor A: Brightness: 128 [ 477.563255][T26712] v4l2-ctrls: Sensor A: Contrast: 128 [ 477.568770][T26712] v4l2-ctrls: Sensor A: Hue: 0 [ 477.573697][T26712] v4l2-ctrls: Sensor A: Saturation: 128 23:01:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000300)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0xa, @pix_mp}) [ 477.579421][T26712] Sensor A: ================== END STATUS ================== [ 477.610769][T26715] user requested TSC rate below hardware speed 23:01:59 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009050f1f0063000000090587bfa93603a42202014407246cd949cd6417c85c3bfb8d2fc1c031ce46f218574adfe2abeb77f9ac4f64940f50306caeb80de93d55fa729e051027638ec05e84e6438d5024c899a4976a9a75cce49bccd2b1d9f5d5678f67f8d6407621b4bc45d83a6ee584d4cadbbc9d653447f94255cffccc6a6a0771300466058c955b17d91e52a5ecc3c71d009507b29b25b22ac6e97e6c115ba52b77a25add0fa1a9341d37f3c20f12cc1719f43acafafab285179608cdee9c0ecfa1f38b58e19ca69880788c976be6"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x196) 23:01:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f00001fb000/0x1000)=nil, 0x1000, 0x0) 23:01:59 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x801}, 0x1fe) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0x11) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 23:01:59 executing program 1: syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b48708e305050579bd000000010902240001010000070904a500010e010000092108006b0122700c0905031a000055fd71"], 0x0) [ 477.921647][T26825] user requested TSC rate below hardware speed 23:02:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 478.061634][T26838] user requested TSC rate below hardware speed [ 478.153235][ T3903] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 478.185568][T26753] user requested TSC rate below hardware speed [ 478.212258][T11399] usb 2-1: new low-speed USB device number 26 using dummy_hcd 23:02:00 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x801}, 0x1fe) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0x11) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 23:02:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x245, &(0x7f0000000300)={&(0x7f00000009c0)={0x14, 0x30, 0x30d, 0x0, 0x0, {0x1801}}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 23:02:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002740)=@ipv4_delroute={0x24, 0x19, 0x301, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xff}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 23:02:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 478.402310][ T3903] usb 5-1: Using ep0 maxpacket: 8 23:02:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={[], [], @remote}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 23:02:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:02:00 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x801}, 0x1fe) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0x11) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 478.532797][ T3903] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 478.541356][ T3903] usb 5-1: config 0 has no interface number 0 [ 478.548091][ T3903] usb 5-1: config 0 interface 28 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 478.559247][ T3903] usb 5-1: config 0 interface 28 altsetting 0 endpoint 0x87 has invalid maxpacket 1705, setting to 1024 [ 478.570585][ T3903] usb 5-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 478.572232][T11399] usb 2-1: config 1 has an invalid interface number: 165 but max is 0 [ 478.579760][ T3903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.596191][T11399] usb 2-1: config 1 has no interface number 0 [ 478.602533][T11399] usb 2-1: config 1 interface 165 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 478.612832][T11399] usb 2-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 478.622191][T11399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.738586][ T3903] usb 5-1: config 0 descriptor?? [ 478.789273][T11399] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 478.796414][T11399] uvcvideo: No valid video chain found. [ 478.823365][ T3903] ldusb 5-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 478.987181][ T3903] usb 2-1: USB disconnect, device number 26 [ 479.002031][ T12] usb 5-1: USB disconnect, device number 11 [ 479.015312][ T12] ldusb 5-1:0.28: LD USB Device #0 now disconnected [ 479.752113][ T12] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 479.782172][ T3903] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 480.022191][ T3903] usb 5-1: Using ep0 maxpacket: 8 [ 480.112262][ T12] usb 2-1: config 1 has an invalid interface number: 165 but max is 0 [ 480.120659][ T12] usb 2-1: config 1 has no interface number 0 [ 480.127085][ T12] usb 2-1: config 1 interface 165 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 480.137252][ T12] usb 2-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=bd.79 [ 480.146779][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.156126][ T3903] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 480.164624][ T3903] usb 5-1: config 0 has no interface number 0 [ 480.170822][ T3903] usb 5-1: config 0 interface 28 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 480.182055][ T3903] usb 5-1: config 0 interface 28 altsetting 0 endpoint 0x87 has invalid maxpacket 1705, setting to 1024 [ 480.193565][ T3903] usb 5-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 480.202934][ T3903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.213755][ T3903] usb 5-1: config 0 descriptor?? [ 480.257104][ T12] uvcvideo: Found UVC 0.00 device (05e3:0505) [ 480.264849][ T12] uvcvideo: No valid video chain found. [ 480.282536][ T3903] ldusb 5-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 480.454944][T11399] usb 2-1: USB disconnect, device number 27 [ 480.462973][ T12] usb 5-1: USB disconnect, device number 12 [ 480.477715][ T12] ldusb 5-1:0.28: LD USB Device #0 now disconnected 23:02:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000100)) 23:02:02 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f000058bfe4)="29000000140003b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:02:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r5 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:02:03 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x1}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f00000018c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)="18", 0x1}]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000d0003000000cdf1e1b6503400c8ff2e19dee14b5331d9f01816791dcd0f0c71df3719a41859fbb0959f00ac0dc6f62495fd61892a20f1d0f3929342bac8db0b360b58cc01a76416110cb0fcea06a92ce4c8902e1b9a97c21ff62fc7e82614025180fa45d44d74e25f22f22849988d27733df048969694d40176bd88d156132a0e270519d94eedb8fba6e3d8cd16e25699d007980dab820f1610448c66f4f3e2aa07f4779c776cceff6e10332ede266c815c4bfa05d6d8215effbb9f5e1c543821040cce61fb2b484f6f31cb8292bc98013f102029dc6a9c6eb55c3c63051f8d9808e2c99b"], 0x30}}, 0x0) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 23:02:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:03 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x801}, 0x1fe) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0x11) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 23:02:03 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x4000000, &(0x7f0000000180), 0x10) [ 480.946183][T26988] user requested TSC rate below hardware speed 23:02:03 executing program 3: unshare(0x600) syncfs(0xffffffffffffffff) 23:02:03 executing program 5: unshare(0x20400) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 23:02:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80904109}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, "df348e9bbbee1bcfb24a154bcbc0a9d195b04effce5922a69e3da15491723b33bc924c978cbd9fbddbc636349b66d56eee36fb33a4287d9002e6816d42c91fe7", "2d3c1a4387a1c42a2211ee08d0de68350e1884b9621c1b6333393d3bacb2d6ab7c6aa3b9ddfcb4066c3a97a28744757d4126a8718d2dae2493325b65a505a0dc", "c368f2b810a0c6c6428da963e15d52600793fa0ba6672af629fb9c8a12a95af0"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0xfffffffffffffe42) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23:02:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x4}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0x4f89}]}]}, 0x24}}, 0x0) [ 481.331152][T27011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 481.403712][T27064] user requested TSC rate below hardware speed 23:02:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="230000004e00817491bc655067d7aee4050c00000f000300f0a30000000000008b1832", 0x23}], 0x1}, 0x0) [ 481.447666][T27105] openvswitch: netlink: Missing key (keys=40, expected=10000000) 23:02:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) [ 481.627771][T27123] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 481.641002][T27074] openvswitch: netlink: Missing key (keys=40, expected=10000000) 23:02:03 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="230000004e00817491bc655067d7aee4050c00000f000300f0a30000000000008b1832", 0x23}], 0x1}, 0x0) [ 481.700890][T27064] user requested TSC rate below hardware speed [ 481.780061][T26988] user requested TSC rate below hardware speed [ 481.827721][T27165] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 481.864315][T27011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 23:02:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x0, 0x4, 0x0, 0xa}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 23:02:04 executing program 1: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000100)="1755921e2079ac5c105eca1ad201b208ecf92104fe99d1696a5a02e2a1364ae2552d664e6028a1190cf152ed6e0ab02e0c700adc57ab5bf392f50c54f518a27e7e7d1bd54a33c9dc1db639c4ec98b215ba76560408ff7ebc64b994df2757c753562fefc637c53e40f27c93b6b61eed34d38f6c1d1558131bc4f965552011a57aa4eba634c0578c708715f772e7597661177311639acef737cd7bbb5ce8af4f158e45709e3652fd4a0b9df93f45fb7b4f775c3d17df705ba49a15081cb67fa6bd42", 0xc1) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, 0x0, &(0x7f00000000c0)=0xffffffdd) 23:02:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x120) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10000017a) shutdown(r1, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x1a) 23:02:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x2c}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48) 23:02:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="230000004e00817491bc655067d7aee4050c00000f000300f0a30000000000008b1832", 0x23}], 0x1}, 0x0) 23:02:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:04 executing program 4: creat(&(0x7f0000000280)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000007, 0x15012, r0, 0x0) mremap(&(0x7f0000279000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000479000/0x4000)=nil) [ 482.359062][T27243] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 23:02:04 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="230000004e00817491bc655067d7aee4050c00000f000300f0a30000000000008b1832", 0x23}], 0x1}, 0x0) 23:02:04 executing program 4: syz_emit_ethernet(0x1bc, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x3281, 0x880b, 0x4, 0x60, 0x0, 0x0, 0x2, 0x0, 0x0, "e70100", 0x0, "cd0021"}}}}}}, 0x0) 23:02:04 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @decrefs={0x630c}], 0x0, 0x0, 0x0}) [ 482.657835][T27316] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 482.674660][T27340] debugfs: File '27325' in directory 'proc' already present! [ 482.701159][T27340] binder: 27325:27340 unknown command 0 [ 482.707456][T27340] binder: 27325:27340 ioctl c0306201 200002c0 returned -22 23:02:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, 0xffffffffffffffff, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:04 executing program 5: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) geteuid() creat(0x0, 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) 23:02:04 executing program 4: syz_emit_ethernet(0x1bc, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x3281, 0x880b, 0x4, 0x60, 0x0, 0x0, 0x2, 0x0, 0x0, "e70100", 0x0, "cd0021"}}}}}}, 0x0) 23:02:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_nanosleep(0xfffffffffffffff5, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 23:02:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000002c0)) 23:02:05 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 23:02:05 executing program 4: syz_emit_ethernet(0x1bc, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x3281, 0x880b, 0x4, 0x60, 0x0, 0x0, 0x2, 0x0, 0x0, "e70100", 0x0, "cd0021"}}}}}}, 0x0) 23:02:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x42, &(0x7f0000000000), 0x20a154cc) 23:02:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, 0xffffffffffffffff, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:05 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="240000001a005f0023b3f40700090400020000000010000000100000080002007f000001", 0x24) 23:02:05 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) read$usbfs(r0, &(0x7f0000000080)=""/252, 0xfc) r1 = syz_open_dev$radio(0x0, 0x2, 0x2) read$alg(r1, &(0x7f0000000180)=""/61, 0x3d) 23:02:05 executing program 4: syz_emit_ethernet(0x1bc, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x3281, 0x880b, 0x4, 0x60, 0x0, 0x0, 0x2, 0x0, 0x0, "e70100", 0x0, "cd0021"}}}}}}, 0x0) 23:02:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0x199], [0xc1]}) [ 483.685740][T27562] user requested TSC rate below hardware speed 23:02:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$vnet(r1, &(0x7f0000000040)={0x1, {0x0, 0x0, 0x0}}, 0x68) sendfile(r0, r1, &(0x7f00000000c0), 0x8080fffffffe) 23:02:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x5f, 0x32e, 0x5f, 0x2e, 0x5f], 0x0, 0xffffffffffffffff, 0x2, 0x80000}, 0x3c) 23:02:05 executing program 1: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ff2000/0xd000)=nil, 0xd000) 23:02:05 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="f3", 0x1}, {&(0x7f00000005c0)='5', 0x1}, {0x0, 0xfffffe8d}, {&(0x7f0000000300)="9e", 0x1}], 0x4) 23:02:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timerfd_create(0x1, 0x0) 23:02:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x7, 0x0, "616052eabcab615670171ebe6cf6243bbf3da07800"}) 23:02:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, 0xffffffffffffffff, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2f0000001c0005c5fffdfff10d0000000200001f13000000fc0002c9130001000500000050000000aa67dfe660d7b3", 0x2f}], 0x1}, 0x0) 23:02:06 executing program 0: syz_usb_connect(0x0, 0x373, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 23:02:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 23:02:06 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000600)) 23:02:06 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000180007041dfffd946f6105000a0000001f0000000102080008001ec00000ff7e", 0x24}], 0x1}, 0x0) 23:02:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1b) r5 = dup(r3) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x3b6, 0x0, 0x0, 0x0) 23:02:06 executing program 5: capset(&(0x7f0000000080)={0x400019980330}, &(0x7f0000000200)) ioprio_set$pid(0x2, 0x0, 0x0) [ 484.462226][ T12] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 484.560414][T27771] user requested TSC rate below hardware speed 23:02:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xe, r2, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:06 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9e, 0x3a, 0xf6, 0x40, 0x2001, 0x3308, 0xbb19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "44d5ae"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x3, "00e2ba"}, 0x0, 0x0, 0x0, 0x0}) 23:02:06 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000000000004c9e000008020013000200000000000000000000ed04000600200000000a0000000000f500000500e50008070000001f00000040000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x40000000000002b, 0x0) 23:02:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x802, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000220007031dfffd946f610900000000000543000000000000421ba3a20400ff7e280000001100ff561d3b5b783fd920460000000020000000000000eff24d8238cfa40180f7efbf54", 0x4c}], 0x1}, 0x0) [ 484.630009][T27774] user requested TSC rate below hardware speed 23:02:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1b) r5 = dup(r3) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x3b6, 0x0, 0x0, 0x0) [ 484.823289][ T12] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 484.831597][ T12] usb 1-1: config 0 has no interface number 0 [ 484.837899][ T12] usb 1-1: config 0 interface 96 has no altsetting 0 [ 484.843003][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 484.844908][ T12] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=87.f5 [ 484.863355][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.878075][ T12] usb 1-1: config 0 descriptor?? [ 484.931485][ T12] as10x_usb: device has been detected [ 484.938397][ T12] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) 23:02:07 executing program 3: syz_usb_connect(0x0, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) [ 484.991138][T27844] user requested TSC rate below hardware speed [ 485.022614][T11399] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 485.114948][ T12] usb 1-1: DVB: registering adapter 0 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 485.176745][ T12] usb 1-1: Direct firmware load for as102_data1_st.hex failed with error -2 [ 485.186423][ T12] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 485.196108][ T12] Registered device Elgato EyeTV DTT Deluxe [ 485.295097][T27786] bond0: (slave bond_slave_1): Releasing backup interface [ 485.332490][ T30] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 485.354700][ T3903] usb 1-1: USB disconnect, device number 37 [ 485.382468][ T3903] Unregistered device Elgato EyeTV DTT Deluxe [ 485.384679][ T3903] as10x_usb: device has been disconnected [ 485.432325][T11399] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 485.440625][T11399] usb 5-1: config 0 has no interface number 0 [ 485.446952][T11399] usb 5-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=bb.19 [ 485.456380][T11399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.469456][T11399] usb 5-1: config 0 descriptor?? [ 485.602191][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 485.722507][ T30] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 485.730838][ T30] usb 4-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 485.741325][ T30] usb 4-1: config 0 has no interface number 0 [ 485.747588][ T30] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=a2.2f [ 485.759203][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.767876][T11399] rtl8192cu: Chip version 0x0 [ 485.772792][T11399] rtl_usb: Too few input end points found [ 485.779795][ T30] usb 4-1: config 0 descriptor?? [ 485.932392][T11399] usb 5-1: Unsupported test chip [ 485.937569][T11399] usb 5-1: Fatal - failed to identify chip [ 485.944152][T11399] rtl8xxxu: probe of 5-1:0.29 failed with error -524 [ 486.024950][T11397] usb 4-1: USB disconnect, device number 26 [ 486.122207][ T30] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 486.135425][ T3903] usb 5-1: USB disconnect, device number 13 [ 486.492787][ T30] usb 1-1: config 0 has an invalid interface number: 96 but max is 0 [ 486.501154][ T30] usb 1-1: config 0 has no interface number 0 [ 486.507631][ T30] usb 1-1: config 0 interface 96 has no altsetting 0 [ 486.516714][ T30] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=87.f5 [ 486.526046][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.536600][ T30] usb 1-1: config 0 descriptor?? [ 486.589791][ T30] as10x_usb: device has been detected [ 486.596649][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 486.635066][ T30] usb 1-1: DVB: registering adapter 0 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 486.648973][ T30] usb 1-1: Direct firmware load for as102_data1_st.hex failed with error -2 [ 486.658044][ T30] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 486.665864][ T30] Registered device Elgato EyeTV DTT Deluxe [ 486.785467][ T12] usb 1-1: USB disconnect, device number 38 [ 486.800830][ T12] Unregistered device Elgato EyeTV DTT Deluxe [ 486.806475][ T12] as10x_usb: device has been disconnected [ 486.822210][ T3903] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 486.922268][T11397] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 487.072126][ T3903] usb 4-1: Using ep0 maxpacket: 8 23:02:09 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000000)="0600000000000000c9b9000f060000002a1ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfcf04f7b0bdd78687423a6bff51b9f9218a249e3d00"/104, 0xb3) 23:02:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1b) r5 = dup(r3) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x3b6, 0x0, 0x0, 0x0) 23:02:09 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xe, r2, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x802, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000220007031dfffd946f610900000000000543000000000000421ba3a20400ff7e280000001100ff561d3b5b783fd920460000000020000000000000eff24d8238cfa40180f7efbf54", 0x4c}], 0x1}, 0x0) [ 487.192546][ T3903] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 487.201147][ T3903] usb 4-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 487.211717][ T3903] usb 4-1: config 0 has no interface number 0 [ 487.218290][ T3903] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=a2.2f [ 487.227942][ T3903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.265304][T27908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.285711][T11397] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 487.294061][T11397] usb 5-1: config 0 has no interface number 0 [ 487.300307][T11397] usb 5-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=bb.19 [ 487.307305][ T3903] usb 4-1: config 0 descriptor?? [ 487.309633][T11397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:02:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x802, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000220007031dfffd946f610900000000000543000000000000421ba3a20400ff7e280000001100ff561d3b5b783fd920460000000020000000000000eff24d8238cfa40180f7efbf54", 0x4c}], 0x1}, 0x0) [ 487.389178][T27928] dlm: no locking on control device [ 487.431774][T11397] usb 5-1: config 0 descriptor?? 23:02:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001b0000000000080003000500000008001c00", @ANYRES32, @ANYBLOB="10000500bddd00000800160005000000"], 0x5c}}, 0x0) [ 487.555621][ T3903] usb 4-1: USB disconnect, device number 27 23:02:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1b) r5 = dup(r3) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x3b6, 0x0, 0x0, 0x0) [ 487.599811][T27971] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 487.608698][T27971] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 487.617210][T27971] (unnamed net_device) (uninitialized): option peer_notif_delay: invalid value (18446744073709551615) [ 487.628376][T27971] (unnamed net_device) (uninitialized): option peer_notif_delay: allowed values 0 - 2147483647 [ 487.640855][T27956] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.705729][T11397] rtl8192cu: Chip version 0x0 [ 487.710608][T11397] rtl_usb: Too few input end points found 23:02:09 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9e, 0x3a, 0xf6, 0x40, 0x2001, 0x3308, 0xbb19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "44d5ae"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x3, "00e2ba"}, 0x0, 0x0, 0x0, 0x0}) 23:02:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, {0x2, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x7, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) 23:02:09 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xe, r2, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x802, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000220007031dfffd946f610900000000000543000000000000421ba3a20400ff7e280000001100ff561d3b5b783fd920460000000020000000000000eff24d8238cfa40180f7efbf54", 0x4c}], 0x1}, 0x0) [ 487.800780][T28028] user requested TSC rate below hardware speed [ 487.883288][T11397] usb 5-1: Unsupported USB TX end-points [ 487.889287][T11397] usb 5-1: Fatal - failed to identify chip [ 487.895807][T11397] rtl8xxxu: probe of 5-1:0.29 failed with error -524 [ 487.933285][T28032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.964695][T11397] usb 5-1: USB disconnect, device number 14 23:02:10 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2200000088) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000004c0)=0x7, 0xd124a2317ccf4b5d) sendto$inet(r0, &(0x7f0000000040)="ca", 0x1, 0x0, 0x0, 0x0) 23:02:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x14, r3, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 23:02:10 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0x7}}, 0x24) 23:02:10 executing program 5: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000013000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000002c0), 0xc, &(0x7f00000007c0)={&(0x7f0000001fc0)={0x2bc, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}]}]}, 0x2bc}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 23:02:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)=ANY=[@ANYBLOB="240000000201010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}}, 0x0) [ 488.362584][T11397] usb 5-1: new high-speed USB device number 15 using dummy_hcd 23:02:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x14, r3, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 23:02:10 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:02:10 executing program 3: rt_sigsuspend(0x0, 0x0) [ 488.569888][T28161] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 488.732831][T11397] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 488.742186][T11397] usb 5-1: config 0 has no interface number 0 [ 488.748478][T11397] usb 5-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=bb.19 [ 488.757816][T11397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.816314][T11397] usb 5-1: config 0 descriptor?? [ 489.082250][T11397] rtl8192cu: Chip version 0x0 [ 489.087221][T11397] rtl_usb: Too few input end points found [ 489.292462][T11397] usb 5-1: Unsupported test chip [ 489.297703][T11397] usb 5-1: Fatal - failed to identify chip [ 489.304292][T11397] rtl8xxxu: probe of 5-1:0.29 failed with error -524 [ 489.499801][ T3903] usb 5-1: USB disconnect, device number 15 23:02:12 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9e, 0x3a, 0xf6, 0x40, 0x2001, 0x3308, 0xbb19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "44d5ae"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x3, "00e2ba"}, 0x0, 0x0, 0x0, 0x0}) 23:02:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x14, r3, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 23:02:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 23:02:12 executing program 3: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d5", 0xb1}], 0x1}, 0x0) recvfrom(r1, &(0x7f0000000540)=""/131, 0x83, 0x100000042, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x70e000) 23:02:12 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x71, 0x48, 0x1c, 0x400000000010, 0x1058, 0x631, 0x16c7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcb, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0) 23:02:12 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:02:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x14, r3, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 23:02:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff33, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x20000032, 0x201, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}}, 0x0) 23:02:12 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 490.296711][T28396] tc_dump_action: action bad kind 23:02:12 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) 23:02:12 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0xb1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r2, r0) [ 490.352630][T11397] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 490.382841][ T30] usb 5-1: new high-speed USB device number 16 using dummy_hcd 23:02:12 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) [ 490.632131][T11397] usb 1-1: Using ep0 maxpacket: 16 [ 490.774197][T11397] usb 1-1: config 0 has an invalid interface number: 203 but max is 0 [ 490.783079][T11397] usb 1-1: config 0 has no interface number 0 [ 490.789262][T11397] usb 1-1: config 0 interface 203 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 490.799384][T11397] usb 1-1: New USB device found, idVendor=1058, idProduct=0631, bcdDevice=16.c7 [ 490.808592][T11397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.820653][ T30] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 490.829060][ T30] usb 5-1: config 0 has no interface number 0 [ 490.835379][ T30] usb 5-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=bb.19 [ 490.844615][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.868352][ T30] usb 5-1: config 0 descriptor?? [ 490.874600][T11397] usb 1-1: config 0 descriptor?? [ 490.917771][T11397] usb 1-1: This Realtek USB WiFi dongle (0x1058:0x0631) is untested! [ 490.926745][T11397] usb 1-1: Please report results to Jes.Sorensen@gmail.com [ 491.122430][ T30] rtl8192cu: Chip version 0x0 [ 491.127222][ T30] rtl_usb: Too few input end points found [ 491.172285][T11397] usb 1-1: Unsupported USB TX end-points [ 491.178416][T11397] usb 1-1: Fatal - failed to identify chip [ 491.184944][T11397] rtl8xxxu: probe of 1-1:0.203 failed with error -524 [ 491.197956][T11397] usb 1-1: USB disconnect, device number 39 [ 491.332422][ T30] usb 5-1: Unsupported test chip [ 491.338067][ T30] usb 5-1: Fatal - failed to identify chip [ 491.344808][ T30] rtl8xxxu: probe of 5-1:0.29 failed with error -524 [ 491.540668][T11397] usb 5-1: USB disconnect, device number 16 [ 491.882058][ T30] usb 1-1: new high-speed USB device number 40 using dummy_hcd 23:02:14 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9e, 0x3a, 0xf6, 0x40, 0x2001, 0x3308, 0xbb19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "44d5ae"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x3, "00e2ba"}, 0x0, 0x0, 0x0, 0x0}) 23:02:14 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:02:14 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480), &(0x7f00000004c0)=0x8) 23:02:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x2, 0x6, @dev}, 0x10) [ 492.132452][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 492.252606][ T30] usb 1-1: config 0 has an invalid interface number: 203 but max is 0 [ 492.260997][ T30] usb 1-1: config 0 has no interface number 0 [ 492.267458][ T30] usb 1-1: config 0 interface 203 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 492.277701][ T30] usb 1-1: New USB device found, idVendor=1058, idProduct=0631, bcdDevice=16.c7 [ 492.287301][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.299390][ T30] usb 1-1: config 0 descriptor?? [ 492.344263][ T30] usb 1-1: This Realtek USB WiFi dongle (0x1058:0x0631) is untested! [ 492.353013][ T30] usb 1-1: Please report results to Jes.Sorensen@gmail.com [ 492.442326][T11397] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 492.602358][ T30] usb 1-1: Unsupported USB TX end-points [ 492.608095][ T30] usb 1-1: Fatal - failed to identify chip [ 492.614559][ T30] rtl8xxxu: probe of 1-1:0.203 failed with error -524 [ 492.632447][ T30] usb 1-1: USB disconnect, device number 40 [ 492.802363][T11397] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 492.810673][T11397] usb 5-1: config 0 has no interface number 0 [ 492.817055][T11397] usb 5-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=bb.19 [ 492.826284][T11397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.835936][T11397] usb 5-1: config 0 descriptor?? 23:02:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x74}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 23:02:15 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x80000000000401, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x1, 0x1}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000300)) 23:02:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 23:02:15 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000002100000000000000c00100010502f32ebdbed828026256be5452644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) 23:02:15 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 493.092867][T11397] rtl8192cu: Chip version 0x0 [ 493.098191][T11397] rtl_usb: Too few input end points found [ 493.103198][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 493.103229][ T31] audit: type=1400 audit(1571871735.155:31): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=28637 comm="syz-executor.3" 23:02:15 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="da511d82144faaca584231354bdd0d748f0a1dd081d4afa96bef1ba72590cc145c9166d4c3b5b0f279326c35bd7360ef55979ce1b2c8452733f0486f754dce3c9f4707c5b355217669bcace6f1c873563042a66ddd98ba4c01591d8125de1d1c7e60b66d4f72d9c976ea84ccadf13f7bbf3ebb17c77f1a84a2bd1ddf2cf228f8c4d04b21bd1adcdd5d603ed620281953a5dabdc60b80dbed5eb2f5f6b6f544daf855173a31443e16efa417e70fafa91796e1f93cfd94d40bc671192611e29831e0bc5d9dd0024810"}) 23:02:15 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000002100000000000000c00100010502f32ebdbed828026256be5452644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) 23:02:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c000000140081f87059ae08060c040002026b10400103fe0500018701546fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8ff5314461", 0x4c}], 0x1}, 0x0) [ 493.306891][T11397] usb 5-1: Unsupported test chip [ 493.312282][T11397] usb 5-1: Fatal - failed to identify chip [ 493.318696][T11397] rtl8xxxu: probe of 5-1:0.29 failed with error -524 [ 493.514848][ T3903] usb 5-1: USB disconnect, device number 17 23:02:16 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000002100000000000000c00100010502f32ebdbed828026256be5452644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) 23:02:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000017000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfde4) 23:02:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:02:16 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:02:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x3}, [@RTA_DST={0x3, 0x9}]}, 0x24}}, 0x0) [ 494.152276][T28776] user requested TSC rate below hardware speed [ 494.181283][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 23:02:16 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="750bea946bb7", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x10, 0x2f, 0x0, @empty, @local, {[], @icmpv6=@ndisc_ra}}}}}, 0x0) [ 494.196927][T28778] user requested TSC rate below hardware speed 23:02:16 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a30000000002000000000000000000000000002100000000000000c00100010502f32ebdbed828026256be5452644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) [ 494.294665][T28814] user requested TSC rate below hardware speed [ 494.305896][T28776] user requested TSC rate below hardware speed 23:02:16 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r0, 0x0) 23:02:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x79}) 23:02:16 executing program 1: r0 = gettid() r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) read(r1, &(0x7f0000000400)=""/4096, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) clone(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x401004000000016) 23:02:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newae={0x40, 0x1e, 0x1, 0x0, 0x0, {{@in=@local}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x40}}, 0x0) 23:02:16 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r2 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r1, 0xe, r2, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r1, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:16 executing program 5: unshare(0x2000400) r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000240)="21e699724017c0dc4ce7f6e86d17b0896c9ac9e2118df90ca405049f89f49ef74a5eafbbe0e81db0a143ee2fde1fc83a3f137f95b6c79f96c1275f2f27755086645c007a7943c496", 0x48) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0x0) 23:02:16 executing program 0: ioprio_set$pid(0x0, 0x0, 0x7c39) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0xfffffffffffffffa, 0x80}, 'port0\x00', 0x25, 0x1, 0x6, 0x5, 0x19c, 0x10001, 0xd12, 0x0, 0x4, 0x7fffffff}) clone(0x20008573, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x2, 0x0) clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) fstat(r1, &(0x7f0000000940)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xc) 23:02:16 executing program 3: mprotect(&(0x7f000009b000/0x1000)=nil, 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 23:02:16 executing program 5: setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080)=0x4, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0xfb42833}], 0x1) 23:02:16 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xd4, 0x0, 0xffffffffffffffff) 23:02:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x2007, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003300050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018003001700d1bd", 0x2e}], 0x1}, 0x0) 23:02:17 executing program 3: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) syz_open_dev$sg(0x0, 0x0, 0x7e00) 23:02:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:02:17 executing program 5: getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1], 0x1c}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000003040), 0x4000000000003c4, 0x0) [ 495.191354][T29032] openvswitch: netlink: Message has 5 unknown bytes. [ 495.252325][T29034] openvswitch: netlink: Message has 5 unknown bytes. [ 495.323384][T29039] user requested TSC rate below hardware speed 23:02:17 executing program 1: unshare(0x20400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) 23:02:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB=','], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:02:17 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r2 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r1, 0xe, r2, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r1, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000a7aff6)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4000082) rmdir(&(0x7f0000001280)='./file0\x00') 23:02:17 executing program 5: unshare(0x8000400) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x110000000) [ 495.571278][T29046] user requested TSC rate below hardware speed 23:02:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000a7aff6)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4000082) rmdir(&(0x7f0000001280)='./file0\x00') 23:02:17 executing program 5: unshare(0x8000400) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x110000000) 23:02:17 executing program 1: unshare(0x20400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) 23:02:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000a7aff6)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4000082) rmdir(&(0x7f0000001280)='./file0\x00') 23:02:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB=','], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 496.028312][T29039] user requested TSC rate below hardware speed 23:02:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:02:18 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r2 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r1, 0xe, r2, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r1, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:18 executing program 5: unshare(0x8000400) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x110000000) [ 496.229927][T29178] user requested TSC rate below hardware speed 23:02:18 executing program 1: unshare(0x20400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) [ 496.325265][T29181] user requested TSC rate below hardware speed 23:02:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000a7aff6)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4000082) rmdir(&(0x7f0000001280)='./file0\x00') 23:02:18 executing program 5: unshare(0x8000400) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) fallocate(r0, 0x0, 0x0, 0x110000000) 23:02:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB=','], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:02:18 executing program 1: unshare(0x20400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) 23:02:18 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x5dc291) chmod(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:02:18 executing program 1: r0 = syz_usb_connect(0x0, 0x26c, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0xb9, 0x80, 0x46, 0x8, 0x18b4, 0x1689, 0x242, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xd8, 0x3a, 0x80}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0xac, &(0x7f0000000400)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="8b15ea0100000b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 23:02:18 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11dc") r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 23:02:19 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r2 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r1, 0xe, r2, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r1, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:02:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB=','], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:02:19 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11dc") r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 497.234201][ T3903] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 497.260258][T29356] user requested TSC rate below hardware speed 23:02:19 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r2 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r1, 0xe, r2, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r1, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:19 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11dc") r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 497.484082][ T3903] usb 2-1: Using ep0 maxpacket: 8 [ 497.602654][ T3903] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.610855][ T3903] usb 2-1: config 0 has no interface number 0 [ 497.617380][ T3903] usb 2-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 2.42 [ 497.626935][ T3903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.726292][ T3903] usb 2-1: config 0 descriptor?? 23:02:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x91, 0x14, 0x8f, 0x40, 0x411, 0x12, 0x565f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x54, 0x74, 0x24}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:02:19 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11dc") r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 23:02:20 executing program 0: r0 = fsopen(&(0x7f0000000200)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x4, &(0x7f0000000040)='dirsync\x00', 0x7ffffffff000, 0x0) [ 498.001748][ T3903] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 498.039861][ T3903] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer 23:02:20 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x180800000) [ 498.051134][ T3903] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 498.059837][ T3903] usb 2-1: media controller created [ 498.073937][T11397] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 498.212030][ T3903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 498.412589][ T3903] usb 2-1: DVB: registering adapter 0 frontend 0 (E3C EC100 DVB-T)... [ 498.420898][ T3903] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 498.432277][ T3903] MXL5005S: Attached at address 0xc6 [ 498.446334][ T3903] usb 2-1: dvb_usb_v2: 'E3C EC168 reference design' successfully initialized and connected [ 498.462364][T11397] usb 4-1: config 0 has an invalid interface number: 206 but max is 0 [ 498.470751][T11397] usb 4-1: config 0 has no interface number 0 [ 498.477425][T11397] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=56.5f [ 498.486702][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.496254][T11397] usb 4-1: config 0 descriptor?? [ 498.617646][ T3903] usb 2-1: USB disconnect, device number 28 [ 498.687946][ T3903] dvb_usb_v2: 'E3C EC168 reference design:2-1' successfully deinitialized and disconnected [ 499.199500][T11397] rtl8150 4-1:0.206: eth1: rtl8150 is detected [ 499.208565][T11397] usb 4-1: USB disconnect, device number 28 [ 499.402286][ T3903] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 499.642143][ T3903] usb 2-1: Using ep0 maxpacket: 8 [ 499.765821][ T3903] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.774085][ T3903] usb 2-1: config 0 has no interface number 0 [ 499.780336][ T3903] usb 2-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 2.42 [ 499.789591][ T3903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.804743][ T3903] usb 2-1: config 0 descriptor?? [ 499.942076][T11397] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 500.072790][ T3903] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 500.084977][ T3903] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 500.095901][ T3903] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 500.104235][ T3903] usb 2-1: media controller created 23:02:22 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r2 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r1, 0xe, r2, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r3, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r6}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup2(r12, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup2(r18, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r1, r19, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = dup2(r21, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) r23 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r13, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r24, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0xb2) r25 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r26 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r26, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r25, 0x4c00, r26) sendfile(r25, r26, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r25, 0x4c01) 23:02:22 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@noop, @timestamp={0x44, 0x4}]}}, @icmp=@timestamp}}}}, 0x0) 23:02:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:02:22 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='.\b\x00group/syz1\x00', 0x1ff) 23:02:22 executing program 1: r0 = syz_usb_connect(0x0, 0x26c, &(0x7f0000001c00)={{0x12, 0x1, 0x0, 0xb9, 0x80, 0x46, 0x8, 0x18b4, 0x1689, 0x242, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xd8, 0x3a, 0x80}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0xac, &(0x7f0000000400)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="8b15ea0100000b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 500.142227][ T3903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.242530][ T3903] i2c i2c-0: ec100: i2c rd failed=-71 reg=33 [ 500.284012][T29585] set_tsc_khz: 1 callbacks suppressed [ 500.284029][T29585] user requested TSC rate below hardware speed [ 500.313285][T11397] usb 4-1: config 0 has an invalid interface number: 206 but max is 0 [ 500.321613][T11397] usb 4-1: config 0 has no interface number 0 23:02:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x3, 0x800008800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) [ 500.328269][T11397] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=56.5f [ 500.337489][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.369677][ T3903] usb 2-1: USB disconnect, device number 29 23:02:22 executing program 0: lgetxattr(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="230103d0db31b032dbea1c8226b46f8c79af17f590c49890c0bbf80a9456731fb93167e586d8c25a7602a712925a289114"], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x4b, "7bef600f5c489544328013f37fed9f0358662e0bad191c350cca6242b5e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c50"}, 0x51) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 500.466931][T11397] usb 4-1: config 0 descriptor?? [ 500.581765][T29664] user requested TSC rate below hardware speed 23:02:22 executing program 4: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 500.792218][ T3903] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 500.809414][T29664] user requested TSC rate below hardware speed 23:02:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x3, 0x800008800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) 23:02:22 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) 23:02:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab", 0x1) 23:02:22 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x91, 0x14, 0x8f, 0x40, 0x411, 0x12, 0x565f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xce, 0x0, 0x0, 0x54, 0x74, 0x24}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 500.862019][T11397] rtl8150 4-1:0.206: eth1: rtl8150 is detected [ 500.917088][T11397] usb 4-1: USB disconnect, device number 29 23:02:23 executing program 0: lgetxattr(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="230103d0db31b032dbea1c8226b46f8c79af17f590c49890c0bbf80a9456731fb93167e586d8c25a7602a712925a289114"], 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x4b, "7bef600f5c489544328013f37fed9f0358662e0bad191c350cca6242b5e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c50"}, 0x51) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 501.052595][ T3903] usb 2-1: Using ep0 maxpacket: 8 23:02:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x1420000a77, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001100090468fe0700000000000700ff3f03000000450001070000001419001a0004", 0x25}], 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 23:02:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x3, 0x800008800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) [ 501.170867][T29798] user requested TSC rate below hardware speed [ 501.203010][ T3903] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.211223][ T3903] usb 2-1: config 0 has no interface number 0 [ 501.217556][ T3903] usb 2-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 2.42 [ 501.226802][ T3903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.331863][ T3903] usb 2-1: config 0 descriptor?? 23:02:23 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000100)=""/143) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000600)='/dev/admmidi#\x00', 0x7, 0x2040) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x100000001}, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x40}, r2, 0xe, r3, 0xb) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="1e", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0xb, r4, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz', 0x0}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000c80)='keyring\x00', &(0x7f0000000cc0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = request_key(&(0x7f0000000d40)='pkcs7_test\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='}(\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000d00)='pkcs7_test\x00', &(0x7f0000000a80)={'\x03\xd8z', 0x3}, &(0x7f00000008c0)='nodev(eth0{&mime_type\\/eth1\xee', r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='ock\x00', 0x8000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xf) poll(&(0x7f0000000000)=[{r7}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup2(r10, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup2(r13, r12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup2(r19, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r2, r20, 0x0, 0x3, &(0x7f0000000200)='syz'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup2(r22, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0xf76f) ioctl$KVM_CREATE_DEVICE(r14, 0xc00caee0, &(0x7f0000000680)={0x6, r0, 0xb7c6c7e6dfc13493}) ioctl(r25, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x0, 0x4c00000000006800}, &(0x7f0000001fee)='R\x10sG\bV\xf2\xaf\xa8WL\xa8\x1f\xb5\x9f\xab\ri', 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xb2) r26 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) r27 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r27, &(0x7f0000001400), 0x1000000000000020, 0x8180d) ioctl$LOOP_CHANGE_FD(r26, 0x4c00, r27) sendfile(r26, r27, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r26, 0x4c01) [ 501.372468][T11397] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 501.634282][ T3903] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 501.670802][ T3903] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 501.682424][ T3903] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 501.690614][ T3903] usb 2-1: media controller created [ 501.734573][T11397] usb 4-1: config 0 has an invalid interface number: 206 but max is 0 [ 501.743325][T11397] usb 4-1: config 0 has no interface number 0 [ 501.749594][T11397] usb 4-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=56.5f [ 501.758956][T11397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.847782][T11397] usb 4-1: config 0 descriptor?? [ 501.861710][ T3903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 502.063010][ T3903] usb 2-1: DVB: registering adapter 0 frontend 0 (E3C EC100 DVB-T)... [ 502.071383][ T3903] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 502.128491][ T3903] MXL5005S: Attached at address 0xc6 [ 502.177859][ T3903] usb 2-1: dvb_usb_v2: 'E3C EC168 reference design' successfully initialized and connected [ 502.296994][ T3903] usb 2-1: USB disconnect, device number 30 [ 502.508737][ T3903] dvb_usb_v2: 'E3C EC168 reference design:2-1' successfully deinitialized and disconnected [ 502.558565][T11397] rtl8150 4-1:0.206: eth1: rtl8150 is detected [ 502.610585][T11397] usb 4-1: USB disconnect, device number 30 [ 502.617451][T11050] ===================================================== [ 502.624449][T11050] BUG: KMSAN: uninit-value in hex_string+0x7d8/0x8d0 [ 502.631142][T11050] CPU: 0 PID: 11050 Comm: udevd Not tainted 5.4.0-rc3+ #0 [ 502.638256][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.648321][T11050] Call Trace: [ 502.651617][T11050] dump_stack+0x191/0x1f0 [ 502.656031][T11050] kmsan_report+0x128/0x220 [ 502.660529][T11050] __msan_warning+0x73/0xe0 [ 502.665278][T11050] hex_string+0x7d8/0x8d0 [ 502.669611][T11050] pointer+0xbfe/0x1d10 [ 502.673786][T11050] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 502.679726][T11050] vsnprintf+0x1c0c/0x3210 [ 502.684157][T11050] scnprintf+0x235/0x300 [ 502.688411][T11050] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 502.694472][T11050] sysfs_format_mac+0xde/0x100 [ 502.699230][T11050] address_show+0x159/0x1d0 [ 502.703854][T11050] ? link_mode_show+0x1a0/0x1a0 [ 502.708701][T11050] dev_attr_show+0xd8/0x1e0 [ 502.713222][T11050] sysfs_kf_seq_show+0x434/0x7b0 [ 502.718169][T11050] ? sysfs_kf_write+0x2a0/0x2a0 [ 502.723168][T11050] kernfs_seq_show+0x164/0x1e0 [ 502.727935][T11050] ? kernfs_seq_next+0x3e0/0x3e0 [ 502.732883][T11050] seq_read+0xac6/0x1d90 [ 502.737257][T11050] kernfs_fop_read+0x2c3/0x9a0 [ 502.742163][T11050] ? kernfs_notify_workfn+0x960/0x960 [ 502.747535][T11050] __vfs_read+0x1a9/0xc90 [ 502.751896][T11050] ? rw_verify_area+0x3a5/0x5e0 [ 502.756763][T11050] vfs_read+0x359/0x6f0 [ 502.760933][T11050] ksys_read+0x265/0x430 [ 502.765199][T11050] __se_sys_read+0x92/0xb0 [ 502.769625][T11050] __x64_sys_read+0x4a/0x70 [ 502.774133][T11050] do_syscall_64+0xb6/0x160 [ 502.778645][T11050] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 502.784529][T11050] RIP: 0033:0x7fd2d43e1310 [ 502.788940][T11050] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 [ 502.808625][T11050] RSP: 002b:00007ffcd88cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.817026][T11050] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fd2d43e1310 [ 502.825697][T11050] RDX: 0000000000001000 RSI: 00007ffcd88cc4d0 RDI: 0000000000000007 [ 502.833682][T11050] RBP: 00007ffcd88cd600 R08: 00007ffcd88cd600 R09: 00007fd2d44377d0 [ 502.841652][T11050] R10: 342f346273752f33 R11: 0000000000000246 R12: 0000000000f9e2d0 [ 502.849745][T11050] R13: 0000000000f9e3c0 R14: 0000000000000001 R15: 0000000000fbdc19 [ 502.857734][T11050] [ 502.860065][T11050] Uninit was stored to memory at: [ 502.865090][T11050] kmsan_internal_chain_origin+0xbd/0x180 [ 502.871756][T11050] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 502.877735][T11050] kmsan_memcpy_metadata+0xb/0x10 [ 502.882841][T11050] __msan_memcpy+0x56/0x70 [ 502.887242][T11050] rtl8150_probe+0x1143/0x14a0 [ 502.892001][T11050] usb_probe_interface+0xd19/0x1310 [ 502.897199][T11050] really_probe+0xd91/0x1f90 [ 502.901783][T11050] driver_probe_device+0x1ba/0x510 [ 502.908021][T11050] __device_attach_driver+0x5b8/0x790 [ 502.913394][T11050] bus_for_each_drv+0x28e/0x3b0 [ 502.918247][T11050] __device_attach+0x489/0x750 [ 502.922994][T11050] device_initial_probe+0x4a/0x60 [ 502.928002][T11050] bus_probe_device+0x131/0x390 [ 502.932854][T11050] device_add+0x25b5/0x2df0 [ 502.937358][T11050] usb_set_configuration+0x309f/0x3710 [ 502.942802][T11050] generic_probe+0xe7/0x280 [ 502.947288][T11050] usb_probe_device+0x146/0x200 [ 502.952149][T11050] really_probe+0xd91/0x1f90 [ 502.956911][T11050] driver_probe_device+0x1ba/0x510 [ 502.962099][T11050] __device_attach_driver+0x5b8/0x790 [ 502.967475][T11050] bus_for_each_drv+0x28e/0x3b0 [ 502.972327][T11050] __device_attach+0x489/0x750 [ 502.978398][T11050] device_initial_probe+0x4a/0x60 [ 502.983426][T11050] bus_probe_device+0x131/0x390 [ 502.988274][T11050] device_add+0x25b5/0x2df0 [ 502.992800][T11050] usb_new_device+0x23e5/0x2fb0 [ 502.997672][T11050] hub_event+0x581d/0x72f0 [ 503.002099][T11050] process_one_work+0x1572/0x1ef0 [ 503.007126][T11050] worker_thread+0x189c/0x2460 [ 503.011880][T11050] kthread+0x4b5/0x4f0 [ 503.015945][T11050] ret_from_fork+0x35/0x40 [ 503.020342][T11050] [ 503.022655][T11050] Local variable description: ----node_id.i@rtl8150_probe [ 503.029752][T11050] Variable was created at: [ 503.034172][T11050] rtl8150_probe+0xdc8/0x14a0 [ 503.038875][T11050] rtl8150_probe+0xdc8/0x14a0 [ 503.043553][T11050] ===================================================== [ 503.050521][T11050] Disabling lock debugging due to kernel taint [ 503.056705][T11050] Kernel panic - not syncing: panic_on_warn set ... [ 503.063316][T11050] CPU: 0 PID: 11050 Comm: udevd Tainted: G B 5.4.0-rc3+ #0 [ 503.072166][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.082231][T11050] Call Trace: [ 503.085524][T11050] dump_stack+0x191/0x1f0 [ 503.089850][T11050] panic+0x3c9/0xc1e [ 503.093763][T11050] kmsan_report+0x215/0x220 [ 503.098615][T11050] __msan_warning+0x73/0xe0 [ 503.103133][T11050] hex_string+0x7d8/0x8d0 [ 503.107465][T11050] pointer+0xbfe/0x1d10 [ 503.111641][T11050] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 503.117528][T11050] vsnprintf+0x1c0c/0x3210 [ 503.121955][T11050] scnprintf+0x235/0x300 [ 503.126210][T11050] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 503.132303][T11050] sysfs_format_mac+0xde/0x100 [ 503.137067][T11050] address_show+0x159/0x1d0 [ 503.141576][T11050] ? link_mode_show+0x1a0/0x1a0 [ 503.146436][T11050] dev_attr_show+0xd8/0x1e0 [ 503.151036][T11050] sysfs_kf_seq_show+0x434/0x7b0 [ 503.156002][T11050] ? sysfs_kf_write+0x2a0/0x2a0 [ 503.160847][T11050] kernfs_seq_show+0x164/0x1e0 [ 503.165610][T11050] ? kernfs_seq_next+0x3e0/0x3e0 [ 503.170544][T11050] seq_read+0xac6/0x1d90 [ 503.174809][T11050] kernfs_fop_read+0x2c3/0x9a0 [ 503.179604][T11050] ? kernfs_notify_workfn+0x960/0x960 [ 503.184966][T11050] __vfs_read+0x1a9/0xc90 [ 503.189293][T11050] ? rw_verify_area+0x3a5/0x5e0 [ 503.194141][T11050] vfs_read+0x359/0x6f0 [ 503.198297][T11050] ksys_read+0x265/0x430 [ 503.203843][T11050] __se_sys_read+0x92/0xb0 [ 503.208257][T11050] __x64_sys_read+0x4a/0x70 [ 503.212773][T11050] do_syscall_64+0xb6/0x160 [ 503.217275][T11050] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 503.223177][T11050] RIP: 0033:0x7fd2d43e1310 [ 503.227684][T11050] Code: 73 01 c3 48 8b 0d 28 4b 2b 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 83 3d e5 a2 2b 00 00 75 10 b8 00 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 6e 8a 01 00 48 89 04 24 [ 503.248029][T11050] RSP: 002b:00007ffcd88cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.256449][T11050] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fd2d43e1310 [ 503.264495][T11050] RDX: 0000000000001000 RSI: 00007ffcd88cc4d0 RDI: 0000000000000007 [ 503.272541][T11050] RBP: 00007ffcd88cd600 R08: 00007ffcd88cd600 R09: 00007fd2d44377d0 [ 503.280500][T11050] R10: 342f346273752f33 R11: 0000000000000246 R12: 0000000000f9e2d0 [ 503.288469][T11050] R13: 0000000000f9e3c0 R14: 0000000000000001 R15: 0000000000fbdc19 [ 503.297974][T11050] Kernel Offset: disabled [ 503.302487][T11050] Rebooting in 86400 seconds..