ill(r1, 0x1000000000016) 15:35:11 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:11 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100006, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:11 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 15:35:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x4000000000000000, 0x0, 0x7ff0bdbe}) 15:35:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x87, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e20, 0x3, 'sh\x00', 0x20, 0x7, 0x25}, {@empty, 0x4e20, 0x2000, 0x9, 0x0, 0x1}}, 0x44) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:35:11 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) [ 428.922201][T17139] sctp: [Deprecated]: syz-executor.3 (pid 17139) Use of int in max_burst socket option. [ 428.922201][T17139] Use struct sctp_assoc_value instead [ 428.940339][T17140] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:11 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100007, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 428.971861][T17145] IPVS: set_ctl: invalid protocol: 135 172.20.20.17:20000 15:35:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x4800000000000000, 0x0, 0x7ff0bdbe}) 15:35:12 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:12 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100008, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 429.099748][T17141] IPVS: set_ctl: invalid protocol: 135 172.20.20.17:20000 15:35:12 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) [ 429.142939][T17160] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 429.178044][T17162] sctp: [Deprecated]: syz-executor.3 (pid 17162) Use of int in max_burst socket option. 15:35:12 executing program 4: clock_nanosleep(0x3, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x77359400}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {r0, r1+30000000}}, 0x0) r2 = gettid() r3 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x8000, 0x20000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000280)={0x0, {0x7, 0x3d9f80fa}}) r4 = socket$inet(0x2, 0x3, 0x8000) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x128) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="6200a4481aaf10890000003fd9942b5a1f720180686aa38d7a3164a27e9ddfbe8565c7d75e2080e4f7a5843405ef60f5eeb723b3cae0fd1dc2ef1e345c98c11a2b1efb91ffffffffffffff7279fc1efeb07a8c6285d7ae33f287323162b57a228e6c4477654ca21debf4eb15968ba2", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7a, &(0x7f00000000c0)={r7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x9, 0x100000000}, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x7a, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r10, 0x28, 0x9}, 0xc) 15:35:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x40) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x840801, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x9, 0x1) tkill(r2, 0x1000000000016) [ 429.178044][T17162] Use struct sctp_assoc_value instead 15:35:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x7ff0bdbe}) 15:35:12 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1000a1, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:12 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:12 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100300, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 429.391497][T17181] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:12 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x6000000000000000, 0x0, 0x7ff0bdbe}) 15:35:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e20, 0xb1, @rand_addr="b4f24c176c2d9657f386a0e0e0a38c8d", 0x4}, @in={0x2, 0x4e20, @rand_addr=0x2}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}], 0xfffffffffffffe75) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0x7a, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r6, 0x4, 0xa5}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r7, 0x4) [ 429.446977][T17189] sctp: [Deprecated]: syz-executor.3 (pid 17189) Use of int in max_burst socket option. [ 429.446977][T17189] Use struct sctp_assoc_value instead 15:35:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:12 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100500, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 429.608226][T17204] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 429.666770][T17209] sctp: [Deprecated]: syz-executor.3 (pid 17209) Use of int in max_burst socket option. [ 429.666770][T17209] Use struct sctp_assoc_value instead 15:35:15 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2f, 0x4, @thr={&(0x7f00000000c0)="529a321aade5c3286019f84468ee14c8d9dffd12d1be61987c03635d62ade4cabb215fad9334674ac809201b46287d317e3c8448156f0111c0f7378a6fb0f26f409e345e2cdb56aaed3763e08771119c6e4f7ed1ac4770c0b2c7b3865bf6753217c03da38395dd0ece826e971bec702904baad1eecfce2c7ebcc04f29fe5f67c72e0948f7b1ff997e1e490debc212f32e865212dfc231f4ec0257fbc81fb78f4c0b9db63d8373128d1fbe5cd8c39b9af42c96b8401b8737204eb720e378c748eaf8328b9988e101d47e9327017813beb95ec6888addfb9c16c519668cfb5c1352a3fb290afaf46eaec664457f3537850330d16727057276eb24f5d0a506a06b57c215e742747efd1280ee52e142743f616884269ac3cf8c947911c28463ac62a260ba1fcb0fe42be24e2804cb3bb333c77b44d33a6861c964933964158dfc4e77b78e6aac952a3e8ef7c87714bf3a0ad8b4c082f98443812be8a35d4c45bb60d3582b34fe5f343649f5c9dd4f3ab1f89b423675a771f62f67179684a1d477ef89a0f62fe698323637eb819c4d1ca665e56693565eae88c1a3c5f5407d3e2b8b9e979b93b9a02472a8784638f98a4f6ea6be07703a1d8d7611513703079ab5a8d4c703d7bf628f37c6552dec558bdc070e5d9702567a59174966e300113e6d223e1eda277388665db25d16dd7b5ac50a30dc7703fc2387e13eea77a49370ba5a897282151a2fbe200b0a81a275fb338839d33f55795c96276bbbe98ec36473321781a4c8683ef0066085fcbabb28500d210faac8927f348d71266847573dd1fb99a3dae431cdaf48bd34366efdc8b3065c52d5b3ed447cb4e9e048c2270e3d9f247be67b6155b6c982cb7ce9ec2d9248fec3394840e478cc06802baff82d876daaa14d1fa8fde692bff9195ae739b79fd351e58786d6b95e35bb5428974c439a7fd8bc7614140927a52a040dc79e47e2708674a65820bc2f9f23b0bbf860ed70eaba884fb987ee6a5e484ab8b1de9d45f47f98e2977d8efde496a447daa4e3932517968ec44603c7259274cec224219bb88021b9e9b57d42601a48eeed22da0105de82b4977f4604f0fd4750783f0bae87203ad220a156ee6eb23b752b4d342e807c6ec8ee5a5e6aa5fed2faf6d7233c90ee1a3f9663db06db79fc79b6174bb2a12c28b5c396ede353e56bd77c8eb2e52c6b1af1f9b4448a6da304eb75ae240ac8624a18385c318f35d8433a04ab4daf07b892713f30e24b32948df15d888044b9b8d3045835005b0a2e84f6dbbb514ed8ff7477781ac75b25e96d3ee8e3782f5751bc822cb10538460e2278e7c1571c5f405bb5fa67a535104877405372ff1b4a9bcb63059c66f61568f0fff6aa6978b311203fb1afb74581e4ccec8d39ce16e6eaaf8f8ad9a3b6e96622f164810ad909c86df52d4d17b79d2ad2f20cfdbfb0235413eb5a0e2825caa64342792c8180cf1d4eccc214e5576637f05eeb2de7e0658af7ea34bfd92d439c9e80f0f744327c278eb5333761a7d188fef4296409514b6b058dc7fcb18d53e24767c47b217c8f282014d94b781cddcb89ff5826d94c57be803511a7d44f94ff558ad6a9366dee07c7b364ce739d4b2f5706ae87dd6520ac710ab02f4742d13f5f4919ad95b144648175739cc271717265dc24ada6faf2b3e3b6451753749f5c486af79be9d4822d15a9d69965ef289ed0598715608b9845bbbd0bb13127f08d22637df5cbfdde83d40c477e586d864108f92d7e081419f020d93da832774e9b4fa42644d99168dc6226563427e9724d9eba3da82b8aa1b64e82093674bcd19128aa8044e02046980a7c0c063dc7597b524bb356ad6c4b475cf854b08f339fa0e0b22d7873dc500e7d9f57c3bdbdb3f7d47925e49a794a12a642fb46fe873a5647c1285affb1e17d14ff43454f2197acc1249aae8c274b11dcb7841f40690a152bf22e63c5606c9280b0d678964301c06470c80ac7b6ea4cc0a60dc329199c2e2a4dedc1b47e434aec076e8b3612bccda90560656046ed6d1a450c51701656ed49d25ae782d3660da5dd6a89a1c127a437be092b96b236cc454df61828abc76bd8d4f4c4c468443ac6eafdedfc73cc8e8e8febfe3a75a6b1883c4157c9629c0b47e4a48ecce1039e7798e3f5035860abca2897ae6430f3256e8ee76b7c7df794b6768b94c47acb0d6c48f9ae6b850558e18c1d8f603abc020b0008730c53204a7b58f61ccf508d6b771ea81bf601286c9d7debfb9f6ab70f8e08690b8a9723e6e948fa30cd9441b807d38012fe9ba21d4854cee81b1305f5586f0d6b6b19c7eaef3a512c2f4b4499deaedc6976b6a0fa64072016442afb647cc560afa5e9df904165781c4d33ee68f203dd7f6b0a929b2253a1e712ffd958d8a404201899f4f4257d8081d1ef6f1d71f390747e5de1e0ec91f93433ea91e642c7854ec936b08d2f0e673f8984ba0e8fba1c79a563db1e72775cd229e514b545771a3520cda32bd7983d81bf8eda2826fbc913c94ad4f1e76c825b79bf94f754bcb0477992b4a916c1c47172f66e18df35285d5a950cc7ee4d9bec205cc086ca77fa2ad66c1237bc5f81d97d4ebe901e527e50e08294394398c6fe20e950ae44a4c6da8344ac6810b3b2c59d08372935e43c90f4fcd4b2a126e115bb7f5a804a1119f4cfc02cdab7c899af0851bb107164753b32b4852a369290fe986a929192235f6bad165791ac918f93e2943978f3d4891e6d69e1b419775a0295874684bbfd5adbf6a550ea5c5abe91a9047cfe481be95341b036c618b02c0cb92cf14bc50612e0ed78630de31af5cea4a08d229719402b81cb0724fdf7192ef663c18aa49d7d35834192056c503901407d3ff0cca3f25047ed9b5c21380d9dc89cebf47d335d493a20282ed44254153edfcd4ad4cf3652089136ec671fed6b23b9c2a366d55d40f91200e5acd302505464978771b855f69ea2ea90b7a85dbc5f23f036cc6faa47b37c9ddc1de82793ef3487c84728a9ca22e3f07690a85226f6803da5a81d4fb90eec819b393ccbb590868cc6c933cf7589c5290e66d55809d9c463c61079d7718e530f00732cbf505f15d619b03a3f556cc572e50f988d2efea9a3b7716ce003a58140cafd03a81796d74f5e683c004967a8b2993f1b32c9b4bf09c56d4587546d19ab260079dc5b57fdc6cffaa16f99979e72d715032139f99004f9e7f7b8e605616b588a76135662d4dcb38e820ce84025dcc4590e475c0119c608a4d0d41aea4cd1b0d9a1b9ef7d27aa6de81db7cb971c0114b0dd86880fc0c610125a0e0f98c92e65face5f76efedb8426d734ef2b4d420735d09a53c456929dcfe8bfd86b441cec238e52a0d4b295c273295737392986e8548a0439153842bdc84f770136ce79d07385519c52d54a90ceac06a9a4e1bb47fd8c528ec12611d473eb35e95e19bfce55de8bed548886482289edac804228c42a94a2ad049afb41ace7704c29a193d9398c26e2a2735c2d9abbe0dd5008a43f1f1ee296396f157896f7230d01994737a61d8ca4b2b7fcf7b39d270ba18f233d1c8916864c5fa9f58f34a0d1cbfef202f78a49703de230908de7116164fe72584cfd478a8edb96988a0e96e038d9100291f07afe0507e180e149e3425cb1112fa70f5be730c7e737f63fafe95440a29e42fb69c2b388ce35d2952759fdaafee1c6d03fd55eaa1685cefdab8d24446d98cd3961af5b97569f680f0dc35745f9deffa3672f2aa271dc96a8fdead93cab732d7acb5727120def09bbb5988b4a3c4041725b04d8ee0080fd2380163ac4ef15142eb157d40a9e88f0f94a9fd38dc3cb48daba50df948cf30e1c2d69e34920eaa3ac0de0a14c1780b43684137a68a8fde3bfaf954ba64eb6ae6eb670cc182258d2ebd93c9ea13b810bd2ef7caa54292ea5fb9e2a41f8f35eff511540f0d17f2b6fe77f1b78a9c044f83329f79e222d43fc805c395ad71ea8a75be84cba790b2228867fc1f802d07d1c4a132d5ac402a4f4441c164af5a4375539be2913f664713645d411670c34e6e20d3849633b6e14ef740f085cb4d86db54d2388b0145f87892705a502ab754f6deecb2f8f8110b229b1af22c1f7f7e1ed7650bc68256006791b415f02a548505d7124b65c994df78105e34c5433730e15aa9baf241d309ced2669c903b37326583213ac637ccc25e6af8276ae67a86e71afd2b6e3f079e6599b7b8e037557ff1c6553679369317574a8e62219e309dfd02b38bae1f3381c83355c016b95361c63b4175b52876020e424799a62b075af6d41bc4d966a227f0c30e8f3b3c74115e7edfd95831996aabf119483b673eb6c2c697f529831fc66cf2262ffadb605b863873838555fb82b410b1cb8300e7a6774405814c6a2fba9c180e8cfcd47ed57d47d4460b9363380fb4dcc21701002c41b83de0447553e659e39e54deb8d446554c7af8887236cab85d0b293809943005d03cf0408a084a2a3a4b0b529a278d82ad0b8ad6e79540816d5027227e9dd3e8f0d5b78f7fe388ff2eac896d4236945a33d03995923fff66c2cfcc7741938412404bf37f1d015995e475edd0d0506107d7f7329fbddcf788ac1caa6317552eda71a502da33edd5eef3fff0d3426d3139b85c4c4041e347a8ede3a34ef6b16343fe4ca511f419d744e967b4ea5003866a8b8e190db59356a5ac781c8873fbb4f321556e0dea3033a57cdf135d0cdf4a0a3b07cfabb402fdf267fb8ada5fb6db32619f8055177b78b161b47bb596c90863a63bc0268f0d1a1a45fab29c8c1a5eca9e9bd35313962a3677b6844ca3055faf7447a7c2774983ae6fb723f250935ecc03c136901934595320592ab965116604a70302ac80b4578e6c0bafaabced9cd12e9f9cba4d2eb8b4debe66a7f5bd0bf4bc856beb46512280302f3244aac901e93c7c6b4adb8ab881e72d1ff73e968a630f0334fb802833e4b0e691fd504e6f386ce3bdb4e5ce44894cb21cc4c79c5b05ecbd1acc7f0355e64d28b5440a734e9bd3734e9e135ba21a1f8a83de762926f6653902eceec668324d10c2ab54d6ea9157a6fc480543f8f06d656843ddf3ed8b5867ce94a101877e23df00b19daadc4ccdb6a5eeef35db21482802443dc17d1683d744a8cb1979caf90b6a96bcf1bfdc8f7b1526c8b70ded18d535ef109d78cd9a67f414fc8e321b4fcfe1eb8b69d8163779713ae23db685d48fb1ff62ac19874f97568c9babe87a04fbdc2b911b98ba0a285f7cdc3b407f9cf8f88419826ae4a5649b302d752e7d8190c577a811feb432acc9e13f2cbb161e84fdeb18f11e5e542504dd719643159d1065298b7e9c6aafff43cef3ca426e2fbc393c24edd10c33f7ca955a365fa1e973e48b629b855bdb944c8abff8028492d686078a9edd827c1d08e0de12c264d9dc01c5620a4b673258a81ffe385c5cb83af192fbc5eec2888a46ba150cdc951d17c87f990cde6f205b31f28286f08b7e24a2431eded484a909f6f7c226eeb914fb67090591057b5338f948c2a26e6322bde5baaa436c3b6a9878caca1f5caa55256da9dad5809a130875ee553023aefa632cfecac564032e0715254dd0201e716f6a01b63dee8b26cffc6df8145d5a2e80b172e4998f3ee5da4eee79e645966a4f95749e784cf98088c7bec647bba62415ed788d07c1730bda6f313ac2db1add42874e7e77bd222f9ac51e11cae9636eb7c9ca4af173436db29bc4835b58ae69df66e619b1beffabd0a207b412fb2e50501bea487e9041e1377f82ebe27832a3c52b30c09c8", 0xfffffffffffffffd}}, &(0x7f00000010c0)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) 15:35:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100600, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x6800000000000000, 0x0, 0x7ff0bdbe}) 15:35:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x60) tkill(r4, 0x1000000000016) 15:35:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100700, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 432.297715][T17226] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 432.311537][T17223] sctp: [Deprecated]: syz-executor.3 (pid 17223) Use of int in max_burst socket option. [ 432.311537][T17223] Use struct sctp_assoc_value instead 15:35:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x7ff0bdbe}) 15:35:15 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 432.363703][T17233] vhci_hcd: default hub control req: ff60 v0000 i0000 l0 [ 432.398235][T17230] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x104000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 432.542662][T17247] vhci_hcd: default hub control req: ff60 v0000 i0000 l0 [ 432.560024][T17250] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:18 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x10a100, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x7400000000000000, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) gettid() r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) splice(r0, &(0x7f0000000000), r2, &(0x7f0000000100), 0x3f6d, 0x1) tkill(r1, 0x1000000000016) 15:35:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:18 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x100c0, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[], [{@euid_gt={'euid>', r2}}, {@uid_lt={'uid<', r4}}, {@dont_appraise='dont_appraise'}, {@audit='audit'}]}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x10ff00, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) [ 435.365712][T17266] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 435.385393][T17274] vhci_hcd: default hub control req: ff60 v0000 i0000 l0 15:35:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x60) tkill(r4, 0x1000000000016) 15:35:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) r2 = open(&(0x7f0000000000)='./file0\x00', 0x105000, 0x5416bc10ed87a5f5) connect$caif(r2, &(0x7f00000000c0)=@rfm={0x25, 0x8, "84d3db70a519dfe72635af39c706ac35"}, 0x18) 15:35:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x2, 0x0, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:18 executing program 4: clock_nanosleep(0x2, 0x1, &(0x7f0000051ff0)={0x2000000000003}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x0, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, r4) ioprio_get$pid(0x2, r4) socket$netlink(0x10, 0x3, 0xe) ioctl$void(0xffffffffffffffff, 0x5dabfb328cedddce) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x4000) faccessat(r8, &(0x7f0000000100)='./file0\x00', 0x4, 0x800) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x40) listen(r7, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) tkill(r1, 0x1000000000016) [ 435.658065][T17299] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0xff00000000000000, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x3, 0x0, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) [ 435.818248][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 435.835266][T17300] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 435.850147][T17321] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x4, 0x0, 0x0, 0x7ff0bdbe}) 15:35:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x60) tkill(r4, 0x1000000000016) 15:35:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) [ 436.016616][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 436.026824][T17335] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:19 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x400000) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x3}, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x2, 0x7ff0bdbe}) 15:35:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x5, 0x0, 0x0, 0x7ff0bdbe}) 15:35:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) gettid() r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x424, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40180) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000200), 0x84000) r3 = gettid() tkill(r3, 0x0) 15:35:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x6, 0x0, 0x0, 0x7ff0bdbe}) [ 436.288123][T17360] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x3, 0x7ff0bdbe}) 15:35:19 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x800) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, [0x6, 0xff, 0x9, 0x3]}) [ 436.365204][T17347] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x60) tkill(r4, 0x1000000000016) 15:35:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x7, 0x0, 0x0, 0x7ff0bdbe}) 15:35:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4, 0x7ff0bdbe}) [ 436.533925][T17378] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x8, 0x0, 0x0, 0x7ff0bdbe}) [ 436.669175][T17391] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 436.742189][T17387] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x20000, 0x0) getsockname$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) r3 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) r4 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x0) 15:35:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) accept$nfc_llcp(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x60) 15:35:20 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x5, 0x7ff0bdbe}) 15:35:20 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x77359400}, 0x0) timer_create(0xc550b4563b52b16d, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:20 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xa1, 0x0, 0x0, 0x7ff0bdbe}) 15:35:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:20 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x300, 0x0, 0x0, 0x7ff0bdbe}) 15:35:20 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6, 0x7ff0bdbe}) 15:35:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) [ 437.182943][T17415] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:20 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x500, 0x0, 0x0, 0x7ff0bdbe}) 15:35:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x61aa81) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000100)=0x8, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) mmap(&(0x7f00004fb000/0x4000)=nil, 0x4000, 0x300000f, 0x13, r5, 0x57) tkill(r1, 0x1000000000016) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000000)={0xf22a, 0xfffffffffffffff0, 0x2, 0x80000001, 0x1b, 0x4, 0x6, 0xffffffff, 0x2}) [ 437.305513][T17418] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 437.325714][T17427] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:20 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x7, 0x7ff0bdbe}) 15:35:20 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x600, 0x0, 0x0, 0x7ff0bdbe}) [ 437.513351][T17442] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:23 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x100, 0x4, 0xfe5d}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)={0x9}) 15:35:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) 15:35:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x700, 0x0, 0x0, 0x7ff0bdbe}) 15:35:23 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x8, 0x7ff0bdbe}) 15:35:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) 15:35:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x200, 0x4) 15:35:23 executing program 3: clock_nanosleep(0x2, 0x1, &(0x7f0000051ff0)={0x2000000000003}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x0, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, r4) ioprio_get$pid(0x2, r4) socket$netlink(0x10, 0x3, 0xe) ioctl$void(0xffffffffffffffff, 0x5dabfb328cedddce) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x4000) faccessat(r8, &(0x7f0000000100)='./file0\x00', 0x4, 0x800) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x40) listen(r7, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) tkill(r1, 0x1000000000016) 15:35:23 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xa, 0x7ff0bdbe}) [ 440.193330][T17460] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x4000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x60ff, 0x0, 0x0, 0x7ff0bdbe}) 15:35:23 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x0, @thr={&(0x7f0000000100)="e68fc46c4c728bae82e2b5df2c8067f586d9cacefad53fa940b1730d0e5739683bd657eb42381a2fea1dafc9b749d31cf49af690e736c26c5cf94e84f69f556184325370977342a50e9f660e8764f3df0984e4abfed534aa6ea9fac4048715c88117ee5d5c9b9cf853cfcd555f95e8d792be723e9f0f843f9105fe63768a21776dd9d3536f13dd866da673ebfa91b5e14b23fb060e43cf2b709be8321a0eb301166197c204ba740298c9b7b026a9d034d732caa4501753322cbb6aefea4b3dbdbb1d6dee8b907f5efa2c0d5fa47b8b0f3cae5f7bdd6d87567f6321fc3b8a75", &(0x7f0000000200)="8941fb1e0397726428bb9a8c060ca901d8a26bf363919ef4fa2f620192a53a112996b972ffff1adb1eb5e64c114a03c0570bf1e172ee744c6cb50f77e27de34310ebac38d1fbfda471ffe0e4b64b5b287d86ee2a5b1cdee8645921f044b44488e0bd73f4ad152ea770184d5939604eea3729349afce1088a716f88e118dfa16f7fe1d213d1e1fc29ff8dd8546e337f34f35342d3308ec8ca95f17b375cb434870afff3eb798103a3df00b6e14a8b9d2a8b4f2556f6a2301a"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) accept4$nfc_llcp(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x60, 0x80800) 15:35:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") fcntl$getownex(r0, 0x10, &(0x7f00000016c0)) clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1ff, 0x7, &(0x7f0000001480)=[{&(0x7f0000000100)="594c358f4d5d861de75d54bcf724d77debe25a37d8493ed805c9b31e7a0f7e44b5afd43de9b5e5abe13c5ca84d1dac6f780634aa4d7db4501da3af0971ffa0ac6a7c5c264bac0f8c5bba2336bdbc51c3d670f3749e23481ed20bbd85014579e86e04ff48", 0x64, 0xdc}, {&(0x7f0000000180)="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", 0x1000, 0x4}, {&(0x7f0000001180)="bcb8fab86d10f87921794f6ab83bc812fdd5a4002014f844c9ef8a33f7bc531715441f01eee7f1684f3cc66bce78c0e4497a4ffedce08113f55868147bb99938e970635142aefe55a52ae67fd3ec12e09b94d595680f0b96e9b842e9411da638494923301d4d0b5e90d4423a1611b31948296edc523d8ebc48e2c72fdd2e6e02e50537e40f3e86d741d9db74", 0x8c, 0x200}, {&(0x7f0000001240)="5650e5753d0962180613172d07781db08f70503574bd288eaf6c69d613ac4611bb1b732ee32e12dba21743ed967ae96a5746805b4575ba27546610f83ab356abfb4d54b30d42b7f6cf7f73456f4b6e269cb46cd9efe1ed001fe950ef9e74ee1a29d595592497bc8c2c08c979c83a0b4726029dab164f690b15ab60cd8f1af106db72d2d3d928c0ec8b24040d1060da452f3c8fc80db658bac8be189b693bc7cda317d130c47e5b66d15fd3c0a2f69495b714ce636d318514c09afae3cf4d99bda46b68ba9e6eeb700c1455f628559b7551f1b7ca024f7fe25727fa15e4d3", 0xde, 0x2}, {&(0x7f0000001340)="8e3f75bb26d7d37eb498653bfb66d0b8142ad5025e9ea8372fad8a702ad424d9cfb0692899efd234b1a5ed435a007709859c19555de1cadd10e7bbf7b5f9234b797c3c64dca988608890a64408253ad66634953eae0ee355ecc434ab1a798114f26c27c7a239693d274e2de6647da7af20b35e07489b5b502892", 0x7a, 0x400000}, {&(0x7f00000013c0)="ac4c9691d70c60362b7e5e280cc93fe2e353bab07466fe3d412a1c0a63d37fde14b7fb223dd258a03de62c9ffb5a751d3de31125", 0x34, 0x3ff}, {&(0x7f0000001400)="fa959cad3985a5b830fa60d5e815de3ae56ba14ab704d339080e4529624f99d63ab6275c4c56b3de87bba9b61e8de10a082726381f122a9b2875af6e95bba65435473b356e3c3e34e6c2ebee2e2f43b3e65db835a07051227d9179e74e", 0x5d, 0x4}], 0x100008, &(0x7f0000001540)='mime_type\x00') r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001580)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000015c0)="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") timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001740)={0x3, 0x70, 0x5, 0x1000, 0xddc, 0x3d, 0x0, 0xffffffffffffe19a, 0x80, 0x8, 0x3f, 0x401, 0x0, 0x7f, 0x100000000, 0x9, 0xa847, 0x800, 0x22d, 0x5, 0x5, 0x22, 0x3, 0x7, 0x100, 0x9, 0xde1b, 0x80, 0x0, 0x1, 0x9, 0x3, 0x6, 0x5, 0x4, 0x7, 0x8, 0x800, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000001700), 0x7}, 0x4411, 0x9, 0xb799, 0x9, 0xffffffff, 0x401, 0x80000001}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) [ 440.344876][T17478] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 440.365404][T17482] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:23 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x10, 0x7ff0bdbe}) 15:35:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x7600, 0x0, 0x0, 0x7ff0bdbe}) 15:35:23 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x48, 0x7ff0bdbe}) [ 440.519946][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 440.545496][T17496] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:23 executing program 3: clock_nanosleep(0x2, 0x1, &(0x7f0000051ff0)={0x2000000000003}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x0, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, r4) ioprio_get$pid(0x2, r4) socket$netlink(0x10, 0x3, 0xe) ioctl$void(0xffffffffffffffff, 0x5dabfb328cedddce) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x4000) faccessat(r8, &(0x7f0000000100)='./file0\x00', 0x4, 0x800) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x40) listen(r7, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) tkill(r1, 0x1000000000016) [ 440.745153][T17515] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 440.848604][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 15:35:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) 15:35:23 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x9600, 0x0, 0x0, 0x7ff0bdbe}) 15:35:23 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() io_setup(0x14, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x230}, 0x0]) io_pgetevents(r1, 0x100000001, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)={&(0x7f00000000c0)={0xffffffffffff4798}, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xa14}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0x7, 0xfa22, 0x7, 0x7fff, 0x1}, 0x14) fsync(r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r4 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r4) gettid() tkill(0x0, 0x200000000000017) 15:35:23 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4c, 0x7ff0bdbe}) 15:35:23 executing program 3: clock_nanosleep(0x2, 0x1, &(0x7f0000051ff0)={0x2000000000003}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x0, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = getpid() socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_PTRACER(0x59616d61, r4) ioprio_get$pid(0x2, r4) socket$netlink(0x10, 0x3, 0xe) ioctl$void(0xffffffffffffffff, 0x5dabfb328cedddce) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x4000) faccessat(r8, &(0x7f0000000100)='./file0\x00', 0x4, 0x800) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x40) listen(r7, 0x0) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) tkill(r1, 0x1000000000016) 15:35:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xa100, 0x0, 0x0, 0x7ff0bdbe}) 15:35:24 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x60, 0x7ff0bdbe}) [ 441.052459][T17528] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xff00, 0x0, 0x0, 0x7ff0bdbe}) [ 441.202882][T17542] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 441.227440][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 441.240619][T17549] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x400000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:24 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x68, 0x7ff0bdbe}) 15:35:24 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 441.369733][T17559] vhci_hcd: default hub control req: ff60 v0000 i0000 l0 [ 441.440276][T17565] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:24 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:24 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000005, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfc-control\x00', 0x311281, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000040)=0x78) tkill(r0, 0x1000000000016) 15:35:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x50f000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) tkill(r1, 0x1000000000016) 15:35:24 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6c, 0x7ff0bdbe}) 15:35:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x707100, 0x0, 0x0, 0x7ff0bdbe}) [ 441.955798][T17572] vhci_hcd: default hub control req: ff60 v0000 i0000 l0 15:35:24 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 442.004296][T17580] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:25 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x74, 0x7ff0bdbe}) 15:35:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x70e000, 0x0, 0x0, 0x7ff0bdbe}) [ 442.154312][T17591] vhci_hcd: default hub control req: ff60 v0000 i0000 l0 [ 442.170954][T17596] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x717000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:25 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x7a, 0x7ff0bdbe}) 15:35:25 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 442.200748][T17595] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 442.350796][T17607] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x760000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0xffffffff, 0x3, 0x1ff, 0x2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 15:35:27 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:27 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x300, 0x7ff0bdbe}) 15:35:27 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x77359400}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/netlink\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) connect$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x7, 0x80000001, 0x2, "7f84a752165db97eecd21b295c5057deae5f427f1f6a319d0589e973fdb41012c30ada1e44b4ba7fb76a58bb15b640fd6cfc81fd758513f83e7d5839d9af4e", 0x12}, 0x60) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') gettid() 15:35:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:27 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x500, 0x7ff0bdbe}) 15:35:27 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x960000, 0x0, 0x0, 0x7ff0bdbe}) [ 444.972515][T17623] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:28 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x4, &(0x7f0000066000)={0x0, 0x1000020000012, 0x0, @thr={&(0x7f0000000240)="b7b8b3f923b8c9d838dbb6a3f5ba83cd4d57bdd1c9eff54c4862234e404229403481970e5c19085d9b486711603a7ddd61008a2370540dacfe73326af7ec449d2c972551c860ffc9be9a501e0b9da6f8f65b4fc11c74473dd99b98ff61c010856e44f66c1ebe0b6f40c1e3f379e8b0825523d4282d2d5aaf2dd1ba457914a377457ff4c0b130561484529d084e", &(0x7f00000003c0)="9eb6f66d3c0b493fb1321ffa73e1c6c3d5a27147989258d1884cdbaebacd14512788ca9e743f45f02b4abc1246dd9cb0e04a8f814ffb41c69f6acad3b585d0377dd048847a77f0ba06ad26953ca4ae47518d41c81df6637dab768e1d19991f5598cd342385744376800e798a583a5818ac7e5e318098529cb63224e3ed87b70400565c3b8f4bd65897c7aedcf20473"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) flistxattr(r2, &(0x7f00000000c0)=""/213, 0xd5) prctl$PR_SET_PTRACER(0x59616d61, r1) r3 = getpgrp(r1) ptrace$setopts(0x4200, r3, 0x1, 0x100064) tkill(r0, 0x1000000000016) [ 445.114388][T17637] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:28 executing program 3: r0 = syz_open_dev$usb(0x0, 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0xbf, 0x1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000000c0)={[{0x5, 0x9, 0x4, 0x4, 0xff, 0x7, 0xfff, 0x0, 0x5, 0x2d, 0x9, 0x6, 0x8}, {0x9, 0xfffffffffffffff9, 0x3, 0x5, 0x401, 0x6, 0x5, 0x107, 0xfbb, 0x0, 0x2, 0x27d0, 0x6514}, {0x8, 0x200, 0xfff, 0x7, 0x0, 0x10000, 0x8, 0x9, 0x6, 0x2, 0x0, 0x9, 0x8}], 0x20}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000300)=0x3ff) r7 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={r7, r9, r10}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r5, 0x1000000000016) 15:35:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x600, 0x7ff0bdbe}) 15:35:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xe07000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xf05000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:28 executing program 3: r0 = syz_open_dev$usb(0x0, 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 445.338215][T17656] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:28 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x1000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sched_setparam(0xffffffffffffffff, &(0x7f0000000000)=0x7) clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:35:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x700, 0x7ff0bdbe}) 15:35:28 executing program 3: r0 = syz_open_dev$usb(0x0, 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 445.841486][T17679] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x2000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xa00, 0x7ff0bdbe}) 15:35:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100)=0x9b, 0x4) r3 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) 15:35:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:31 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="83988cce5522589ff98fb59916e4582f55f0b48a6daafe1444b94b671bde0ca1dd2e53e44567fc17035f06af3cbace98fd713cc2d420c4cc5a5587d6d7ec3577e7be2752d84ca35192b9f44f210533960745c07764b76a81cb18f0304f236ce711c9a2d8354d911621d3ecc5cf04d4ffd9e6419d5ac4489d73e2ce0e5c61f0628d05793a4f1a5d175ac9a13621", 0x8d, 0x3}], 0x60, &(0x7f00000001c0)='\xfeposix_acl_accesssecurity.]cgroup\x00') timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="4a2e4789ca535582a76e7c896aa498280029e94429e2dff5d2990c631296260674a2cd503a6ae20ab6ed2b8df58ba6bec479bc91d37069ff8ee2f443b6dea6c42e45442bdb3ef0b9d19d2e2a2bf160047fcbac126033b6928e2dfe7bb0fc124281fd57a195f922016ff4f39638f0ec991e69ee5de915620d1517751f9581cc", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x7a, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={r3, 0x10001, 0x30}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r4, 0x9, 0x30}, 0xc) r5 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r5, 0x1000000000016) 15:35:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x3000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x2000, 0x7ff0bdbe}) [ 448.279002][T17696] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x4000000, 0x0, 0x0, 0x7ff0bdbe}) [ 448.488107][T17717] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002640)='net/netlink\x00') getpeername$packet(0xffffffffffffffff, &(0x7f00000026c0)={0x11, 0x0, 0x0}, &(0x7f0000002700)=0x14) connect$can_bcm(r1, &(0x7f0000002740)={0x1d, r2}, 0x10) r3 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000002680)=0x7f) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/227, 0xe3}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000240)=""/176, 0xf254d1b9cfcff9d0}, {0xfffffffffffffffd, 0x3c8}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000480)=""/170, 0xaa}], 0x6, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000540)=""/4096, &(0x7f0000000340)=0x1000) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000002780)=ANY=[@ANYBLOB="010052d214dcd30be27ae52b2ef3741ff667df863841582485fd0400bde783871dc2c2d7eba7ae0440e88112a7bb51ffe37fcb19690573a9088af0750468327c4ee97afde4d48a146dd696d8150000", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x7a, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001540)={r8, 0x48, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0xb9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x400}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000001580)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000015c0)={r9, 0x1000, "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"}, &(0x7f0000002600)=0x1008) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x400001c) 15:35:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:31 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000000)={{0x0, @multicast1, 0x4e24, 0x1, 'wrr\x00', 0x27, 0x25a0, 0x32}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 0x1, 0x5d65, 0x9}}, 0x44) tkill(r0, 0x1000000000016) 15:35:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x3f00, 0x7ff0bdbe}) 15:35:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x5000000, 0x0, 0x0, 0x7ff0bdbe}) [ 448.666855][T17736] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4000, 0x7ff0bdbe}) 15:35:32 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x6000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:32 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) tkill(r0, 0x1000000000016) 15:35:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:32 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x7000000, 0x0, 0x0, 0x7ff0bdbe}) [ 449.110590][T17756] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 449.219530][T17764] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:32 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4800, 0x7ff0bdbe}) 15:35:32 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000c, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f00000000c0)) tkill(r1, 0x1000000000016) 15:35:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x8000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:32 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x40000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4c00, 0x7ff0bdbe}) [ 449.539027][T17784] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 449.669809][T17798] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x6, 0x99, 0x59f1000e}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r2, 0x3}, 0x8) r3 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r9, &(0x7f0000000100), 0x18d, 0x4000) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f00000002c0)={0x2, r9, 0x1}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) close(r12) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="ca6817b3ae93fc16a4ac730917784b3a01dbd4b935d23f0b7e0aad287259a40803d044e8ae51a7c8fe4c54d5", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7a, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r14, 0x6, 0x100000000}, &(0x7f00000000c0)=0x8) 15:35:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xa1000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:32 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x60ff, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6000, 0x7ff0bdbe}) 15:35:32 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xff000000, 0x0, 0x0, 0x7ff0bdbe}) [ 449.980117][T17811] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 450.078567][T17819] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6800, 0x7ff0bdbe}) 15:35:35 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 15:35:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xff600000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x3, @thr={&(0x7f00000000c0)="f8d2f1d2e516ab693baaf50aba4a08ac2c050cadcd44a8b47192225672249101373b70a83d02a569d9b04ad8c3c627cd64bdbec77a3bd49d719280e7e566c4f7dd4b8e70ea3f6a337956f7105cd14c9deffb513078b877796809000000a8dd691855ebb7e4f5769af1e6da054a802007b1c722ebce7501c6c352df3f5bd7b5f063d54af83554eb9eb0e704004cf3bfc81b13", &(0x7f0000000180)="870f8fb4be96c1a402d09271c718417cbcf76c2539ddbbee5bd8d92bfbdc1fcc6b1df8a7aa09a7dda2c6206d2d67f0c3afa4208dc6dfea59ac51954f3bf4a4987c112d00fa01f3833e72236096890d2e4b771e46268196d8519c2f315b8bd9fd912b52ddd4"}}, &(0x7f00009b1ffc)) timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 15:35:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x400000000000, 0x0, 0x0, 0x7ff0bdbe}) [ 452.551002][T17834] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:35 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 15:35:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6c00, 0x7ff0bdbe}) 15:35:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x555555953000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:35 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) [ 452.681658][T17839] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 452.706212][T17847] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x7400, 0x7ff0bdbe}) 15:35:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x555555975000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:35 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 452.842632][T17857] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x60ffffffffff, 0x0, 0x0, 0x7ff0bdbe}) 15:35:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x7a00, 0x7ff0bdbe}) [ 452.916365][T17863] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 453.041799][T17869] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 453.524043][T17875] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:38 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x760000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xff00, 0x7ff0bdbe}) 15:35:38 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCSTI(r0, 0x5412, 0x3ff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) r5 = getegid() r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r6, 0x138) fsetxattr$system_posix_acl(r6, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r5}, {}]}, 0x3c, 0x1) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0x80800, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r13 = getpid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r15, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) r17 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r17) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d80)={0x0, 0x0}, &(0x7f0000000dc0)=0xc) r19 = getegid() r20 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r20, 0x138) fsetxattr$system_posix_acl(r20, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r19}, {}]}, 0x3c, 0x1) r21 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r22, 0x0) r23 = getegid() r24 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r24, 0x138) r25 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r26 = ioctl$KVM_CREATE_VM(r25, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r26, 0xae41, 0x0) r27 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r28 = ioctl$KVM_CREATE_VM(r27, 0xae01, 0x0) r29 = ioctl$KVM_CREATE_VCPU(r28, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r29, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) fsetxattr$system_posix_acl(r24, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYPTR=&(0x7f0000002100)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f0000002080)=ANY=[@ANYRES32=r26, @ANYRESOCT=r29, @ANYRES64, @ANYRESOCT, @ANYPTR64, @ANYRES64, @ANYPTR, @ANYPTR, @ANYRESOCT], @ANYBLOB="036f1bd91ccb6c5271e29446cb9bf8bdeca20a47f078fc88bc0061af339d", @ANYRESDEC, @ANYRES16], @ANYBLOB="00000000000000000000000081141c320a20ff697cfeb6b5befb62b3a35731472edf9550ffaa1d835e7d17c874fa756577668af709c3e9c6b1c78249aa8bd3ce8b5fa8248332dfeee587385cda3ace29b28d49fe93852a11bf6304222e5a3440eb2bffd63d7333dc9ebdc5b83f9468fc17fa2aa93e5db05d63ee7c1d4cc32a66f06e0aac362b3654132ad3572c41fed6f9d495ef", @ANYRES32=r23, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x7, 0x1) r30 = getegid() r31 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r31, 0x138) fsetxattr$system_posix_acl(r31, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r30}, {}]}, 0x3c, 0x1) r32 = getegid() r33 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r33, 0x138) fsetxattr$system_posix_acl(r33, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r32}, {}]}, 0x3c, 0x1) r34 = getegid() r35 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r35, 0x138) fsetxattr$system_posix_acl(r35, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r34}, {}]}, 0x3c, 0x1) getgroups(0xa, &(0x7f0000000e00)=[0xee00, 0xee00, 0xee00, r23, 0xee01, r30, r32, r34, 0xee01, 0xee01]) r37 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r37) r38 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r38, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r39, 0x0) r40 = getegid() r41 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r41, 0x138) fsetxattr$system_posix_acl(r41, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r40}, {}]}, 0x3c, 0x1) r42 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r42) r43 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r44, 0x0) fstat(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r46 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r47 = ioctl$KVM_CREATE_VM(r46, 0xae01, 0x0) r48 = ioctl$KVM_CREATE_VCPU(r47, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r48, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r49 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r50 = ioctl$KVM_CREATE_VM(r49, 0xae01, 0x0) r51 = ioctl$KVM_CREATE_VCPU(r50, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r51, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r52 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r53 = ioctl$KVM_CREATE_VM(r52, 0xae01, 0x0) r54 = ioctl$KVM_CREATE_VCPU(r53, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r54, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r55 = inotify_init() r56 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r56, 0xae01, 0x0) r57 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r58 = ioctl$KVM_CREATE_VM(r57, 0xae01, 0x0) r59 = ioctl$KVM_CREATE_VCPU(r58, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r59, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r60 = openat$md(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/md0\x00', 0x2000, 0x0) r61 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r61, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r62, 0x0) getgroups(0x8, &(0x7f0000000f00)=[0x0, 0x0, 0xee00, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00]) r64 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r65 = ioctl$KVM_CREATE_VM(r64, 0xae01, 0x0) r66 = ioctl$KVM_CREATE_VCPU(r65, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r66, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r67 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r67, 0xae01, 0x0) r68 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vhci\x00', 0x200000) r69 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001240)='/dev/video2\x00', 0x2, 0x0) r70 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r71 = ioctl$KVM_CREATE_VM(r70, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r71, 0xae41, 0x0) r72 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r73 = ioctl$KVM_CREATE_VM(r72, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r73, 0xae41, 0x0) r74 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r74, 0xae01, 0x0) r75 = accept4$netrom(r0, &(0x7f0000001280)={{0x3, @null}, [@null, @default, @null, @netrom, @default, @default, @null, @bcast]}, &(0x7f0000001300)=0x48, 0x80800) r76 = epoll_create1(0x0) r77 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r78 = ioctl$KVM_CREATE_VM(r77, 0xae01, 0x0) r79 = ioctl$KVM_CREATE_VCPU(r78, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r79, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r80 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r80) r81 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r81, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r82, 0x0) r83 = getegid() r84 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r84, 0x138) fsetxattr$system_posix_acl(r84, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r83}, {}]}, 0x3c, 0x1) r85 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r85) r86 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r86, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r87, 0x0) getresgid(&(0x7f0000001340)=0x0, &(0x7f0000001380), &(0x7f00000013c0)) r89 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r89) r90 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r90, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r91, 0x0) r92 = getgid() r93 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r93, 0xae01, 0x0) r94 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r95 = ioctl$KVM_CREATE_VM(r94, 0xae01, 0x0) r96 = ioctl$KVM_CREATE_VCPU(r95, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r96, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r97 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r98 = ioctl$KVM_CREATE_VM(r97, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r98, 0xae41, 0x0) r99 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r100 = ioctl$KVM_CREATE_VM(r99, 0xae01, 0x0) r101 = ioctl$KVM_CREATE_VCPU(r100, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r101, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r102 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r102, 0xae01, 0x0) r103 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r104 = ioctl$KVM_CREATE_VM(r103, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r104, 0xae41, 0x0) r105 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r106 = ioctl$KVM_CREATE_VM(r105, 0xae01, 0x0) r107 = ioctl$KVM_CREATE_VCPU(r106, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r107, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r108 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r108, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r109, 0x0) r110 = getegid() r111 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r111, 0x138) fsetxattr$system_posix_acl(r111, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r110}, {}]}, 0x3c, 0x1) r112 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r112, 0xae01, 0x0) r113 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001b00)='/proc/self/net/pfkey\x00', 0x0, 0x0) r114 = syz_open_dev$sg(&(0x7f0000001b40)='/dev/sg#\x00', 0x5, 0x20101) r115 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r115, 0xae01, 0x0) r116 = openat$null(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/null\x00', 0x5c1200, 0x0) r117 = getegid() r118 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r118, 0x138) fsetxattr$system_posix_acl(r118, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r117}, {}]}, 0x3c, 0x1) r119 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r119, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r119, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001cc0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001e40)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="b0538f4683034994f6ab980c3c02c14c0bbce8043e86b15e1f8594e14281f2eb4cf78626dceb", 0x26}, {&(0x7f0000000180)="4542f958c208c910e12874657a80bd74e1e1eb7cff10ab8677e4858d8106409c6165dc7617154697dec4cf819454d754356930787c9e5de6bd68fe0cc34db6436314350b660758782456d8ac1980bd0866820f2475e660ed2e8a473da8fa018e6e323e41588f60cc717c4a8db22d37baf2d7c2ec16bb5e5ab6737f8ed1d8f053bccf08f328be8483e9d88be277d93291a3966451316a82c0820481f1", 0x9c}, {&(0x7f0000000240)="3ee579fe51c3c1ec82f0ef39c799eeb1ae7efdc90d6313572f747fce8e4813f8b39394c1282bb9f03435a7a72bdd7fa5d19b0732278a16ef803b88bc51996521a501e2293f6524bce3433a27f8305f27c02393869421ef079eeb95eacda3ea41df60f7bf6630ea3f58eea3325baae76e9c98c7cc408ad8fff5aec0b684d41f8007321432122ca9de05335363432a4c59a5ff23e8898cd7364bddb76af102a895413937a4a110ff17cabaa5c8ed25c9600245948569e3778a753763e1eacdf4703e289359ef41dedda6ed39f2245709b483532dc873d6d8e2720560", 0xdb}, {&(0x7f0000000340)="59380f4426f0bc76bb1c4e23c4d958af4fc18fb6c149c9daf3e1a972f9e8c0b726dd3f3e83af3173fc387093597c16baae9ff2b682a4b92ecb88053e46522abe59782a6c1a6fa2b37559ec4cdacc0914dc53981b15", 0x55}, {&(0x7f00000003c0)="b14c056a32a5c2e2b8f5722e63f77b2ab42a8d092cb56edfc256f427319f8bee74dd27f3764fed21cc67c0bb235a1999", 0x30}], 0x5, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x30, 0x1, 0x1, [r0, r7, 0xffffffffffffffff, r0, r9, r10, r12, r0]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r16}}}], 0x70, 0x8080}, {&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000840)="72ce1d2e10e689365901ccf38078369d3ccc73f2ab4f963c158cd004b174e3cb21e7c777ab7387ae9ead26f2b76c9c6e799e6a4874629d380bde283b46e7dcdd1c9b20de1baa3eec333089fd50ead5e87b39d8ff74821a5344f9af2a409b6550fd74068a52b50d95ffa6e5a43d1f7744973e05aee0422fcb6f011c903827bc1abafb80a9e9132216b2b496204cca3efddcf9bff7fe12c787a4", 0x99}, {&(0x7f0000000900)="94aacbda5300b54d5fc9a6400bcac0d820aed8733cca4ffcb2577153866d4ae3cd63c98c953ba9e87107132618fa75ed756cfd86da7615d3628c30462a3da7b2cc462fa0dd75280ece09b3434658efcdd7e46c595e78e0583a37a3592f947dd280b3b77bfbca45030c46dbdfdef11fc60c98fa2a43d467d79a787bc282e11dc1ea53b8f550b6e112b4d4b10505139df9eabeb59a725f6ef8dd5013cc2106eee6ed793e5ba1c501f0535838acc0fd6e7abdaf8f3c91fb215b529159f1dbfde37ef7e387fbbbcdf1c60a1faa237f1308db7c3bcbe5b7fbca4325", 0xd9}, {&(0x7f0000000a00)="74ebc47c557cb7df9e1e4d15a85edee2fd8f30f0b011134b65599ee24992755c9c18771e92c23e0d8bb308cf441438d66bc1802df9328660cb7a05f9085034ea427fd82c9cec4f63dcf48fba4dc260f9f87227ec42ea64ee5f2f1422826e626751531bc4e8f4e675067d792d8fb9bff265b92df6", 0x74}, {&(0x7f0000000a80)="d3c34079763da420c3a220973d4be0e1e5748e171536d66e93a6a64caa4689b4779547c31fea8d3b6e549f09ed685c4f3281e01cab0aed87c1a8772fae8c45c6e860a7f8be616b260faaff015d8928792948483b382a6219464ac305f7120b46597179aa47cb0ca0f18e79a5bfaa7d49020baf2a3242dcc8b2f3a8f063f62d80c3c82fbf9c15a15bc0af4f17b94f6006edcc7e", 0x93}, {&(0x7f0000000b40)="acb6db229ade7ce8f1ea307e0866c1774597e9c125cb76d88dee2fe78537ba8d887fa88c2615c80867abba4764b37c525f677dd01bebc1c85f8384d5d10557af16e534912824164c1431e7a2e1a370fd7c8dd0fa14036013fe041feadfd8fe35a584151be873688e27f2c26fc6747840574063394d93c1a08713e6d3798dd940e4e42c8e63f9b7eb24541eafc48aca6ca829f400f08a1a0d0f1549b33f303526fdb45469ca8d7f5965e229a896b37e383b34b2fe5029fb", 0xb7}, {&(0x7f0000000c00)="a45e88b5c7c815af6d689acdd841f582d8a129a17670cdbb48dbc79585abca874224b67db68da6eb7ee3ae40b157a5a78dd77286c4aabd9e4a94106adbb7af23d17aa9417371c7a661d44d48027705fa794d3a7651c5ca79d8e21081cbf5264d8cf67ff9b91aaff257e72f9f892667c97f2b09e0894be6795ba56fa50cab90636687382abd9bfd82e791d8f768fc94443a809f142a5fec8a5a1f55a4799203f4cf05eff64bcfdb5f8a602b05b471264a697889c22290ab01212d9307052acc347d767796b98d792dac25ba7b8cf327e8df61d872962974ce27ab678f95a33a8730123f7ed88c", 0xe6}], 0x6, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r1, r22, r36}}}, @cred={{0x1c, 0x1, 0x2, {r37, r39, r40}}}, @cred={{0x1c, 0x1, 0x2, {r42, r44, r45}}}, @rights={{0x20, 0x1, 0x1, [r48, r51, r54, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r55, r0, r56, r59, 0xffffffffffffffff, r60]}}, @cred={{0x1c, 0x1, 0x2, {r1, r62, r63}}}], 0xf8, 0x10}, {&(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000011c0)=[{&(0x7f00000010c0)="8a101eb0f815d797a315930a7090c568f27a705e3a5612c708064994b044e51ccc191f", 0x23}, {&(0x7f0000001100)="62c860c0ed54716030b09eaec4f673e71acccbcc0715c758f66eac170a81a6f667f3380168a3f3d051fe4110bb", 0x2d}, {&(0x7f0000001140)="5da1fbab2abb816bfadb8fbd2c38b78adff7d355ec311f53ce9440d2c6dfcf415f04ca3064e183e43057f4cfdbc657652bdd5d095b4815a63aac2ae539c882bacbbdbfee5c0bb1d12f49a3a3c071aa1669b5dc", 0x53}], 0x3, &(0x7f0000001400)=[@rights={{0x30, 0x1, 0x1, [r66, r0, r67, r68, r0, r0, r69, r71]}}, @rights={{0x24, 0x1, 0x1, [r73, r74, r75, r76, r79]}}, @cred={{0x1c, 0x1, 0x2, {r80, r82, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r83}}}, @cred={{0x1c, 0x1, 0x2, {r85, r87, r88}}}], 0xb8, 0x4048000}, {&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001540)="3264e419184b1cad6d293b46cd01d02d572cd30eb913a5b85680016e0b1dfb0bd5768d74f40ac3e178debc2c00e2e749af03f1dfd9f74e9ba719b4f69ea5a3993e300aa33aa1c894a04f0e8f8b3ba7e22c003bbc82a6fb33bbbdba7a5426f2e9579902f8a17b5dc12187b26b1cd429b69527e8b11c3b6d47b28ccefd3ef0d0eb644cbc87fdef00557cdba46c22b19876bceb74fac068f4aa8544c73840", 0x9d}, {&(0x7f0000001600)="967e33088c56fc8060186bfadb18797795e0fe9ba4bb956109b295624333e0686508b5662d199b34e1", 0x29}, {&(0x7f0000001640)="207e9feb6ca3788b5c111cb004a4dc4f98a9c947d4c170038b9280ebdb468c29a0ab051bf64e80673f912bf71d90a9e3f7ece809ffdecd39102c2b3b8438340c44fb41a70768498471650512965f426d6b5273e302aafefb52ea350bb5bf2dd622fae0bfb41aab31c6e61b39a84c28480bc2abc9bef6461a2ecdb487c67c72deec0dd3c31bb1f4a7d4ea9c84dad8bd6825", 0x91}, {&(0x7f0000001700)="338ce19525fd9378cd6de1fc82ffbec3bdf5377299e7a235a73caf2afbbe6cfcb23b479809d441bd5a11a832c41c5a1e7ca5045d0fa78f9d7b53afb590f878f31e3741cb92c53ce5b337a9da9a1437876ce00112ee73c46700e993f0c39ba0806357371cd7a4d9867ff25eda8de47a8871d4ae223ba77fd68390b08daab8afc80091d02e4d5201585cd2972a7c17a1a97770a9a295a843643ea9d633bb7ff98a0542fccb1949961a4a10e15140742d23f26aa0a8d984cf02f34cb94c0c74770b37e65d60aff335cffd4669c318c84c614bd939d807b1757635667a37c1a72a675bd3e017", 0xe4}], 0x4, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {r89, r91, r92}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [r0, r93, r96, r98, r0, r0, 0xffffffffffffffff, r101, r102, r104]}}, @rights={{0x14, 0x1, 0x1, [r107]}}], 0x90, 0x4044080}, {&(0x7f0000001900)=@abs={0xb170dcbb7e705fde, 0x0, 0x4e23}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001980)="8e8de5b0793ba932adec780f42b0b40ecfc212075f89780f50bb94e029242b973ca9135e9dbb4eb67d03309a3245ab1586c883c100ca07f78c954bbf81795dead61884ff134e07a26270315859c0900567e09659843fe6644ab70b2bb8ef1094de4f79f14ea3aec7dbff6784586e3740ca7680df45", 0x75}, {&(0x7f0000001a00)="186766222074561d9b5c78fa750d8ddac6215f5a38965585138752307a20aa97126ffe9ffefa5f19fa79deb1e9cc6b2b3489fddcd2ae3bdf3068b5ec2515441e04b4df952f4a4c2ba5f43a2219d66203be37a0ad95f2b69a89a64dbc5299a834a0185b0f0783bc159d34cb3f6e23bb7d0fec233aad8acbbd23aa4ab4790a17909b63a91d661b2b06c6ba23c678d95a7663fe158bf3e37e840f31d5f2", 0x9c}], 0x2, &(0x7f0000001d80)=[@cred={{0x1c, 0x1, 0x2, {r1, r109, r110}}}, @rights={{0x28, 0x1, 0x1, [r112, r0, r113, r114, r115, r116]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r117}}}, @cred={{0x1c, 0x1, 0x2, {r1, r120, r121}}}], 0x88}], 0x5, 0x8000) r122 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xe4) connect$rxrpc(r122, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @empty, 0x3}}, 0x24) 15:35:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x7fffffffefff, 0x0, 0x0, 0x7ff0bdbe}) [ 455.615186][T17886] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 455.630855][T17887] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 15:35:38 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x100000, 0x7ff0bdbe}) 15:35:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x0, @thr={&(0x7f0000000180)="393783aa6c8d4da3658c0c3a3b477dbce308618b0db57ac0e10e2af4c8f6896e213c4951edc9b7e9e011750a355f", &(0x7f00000001c0)="c8fe40485826379922e7264ce49a58f4c31c2a108f1333bbf44e8225a73832dfbe15ed3e95e6fe3be2af60c52fa52034ab9e7db721cbfa5f6e91fdf4e3cfd02fd9a05dbc668c52738f0c306e4d3db949898f66cedb74e51e02e071295dc3cba205a16c8d84ef48f49241b119bcea985cdf42"}}, &(0x7f0000000240)) timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x3, &(0x7f0000000080)={{r2, r3+10000000}, {r4, r5+10000000}}, 0x0) r6 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x510000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f0000000140)) tkill(r6, 0x1000000000016) [ 455.678409][ T26] audit: type=1400 audit(1568648138.614:56): avc: denied { create } for pid=17878 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 455.748478][T17888] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x960000000000, 0x0, 0x0, 0x7ff0bdbe}) [ 455.827017][T17901] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 455.834276][T17900] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 15:35:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x5518c0, 0x7ff0bdbe}) 15:35:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x30955555550000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:38 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x6, &(0x7f0000066000)={0x0, 0x1000000000012, 0x3, @thr={&(0x7f0000000140)="0f0d2080dd8376c2e54a2e1d31f3dc466f7e88dc99ef6019493d1913cde9d769b6e14beaac2c9a01a0b81a7c5831be4e4c7e9ab58e3663cad5df43fd3bf32c80552ff4be6559f1e12214de9abbc979e32ebb0deeca423a31a8b4e929486a232e8b307e7da566b6052b6734f576c7ff548e46c36821664a56654277f557525f507a4f941f2a8744b3327000f5df40ac133117c0a9e9756b2299ebc4c8420d285f79651f6e05004fd733bb3155f8ff67c0bfd3a7f37e40d88062129f0b6d350d8d2676f4e4687a657417a80f8e4fa17c625f6944a3c86ffc", &(0x7f0000000100)="ffe954673a6ebf293c69ac58ff9e1ec50692c38313dafce5cc4759666f19000000a1d5ed6b122ab0361c75abcea500"/57}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:38 executing program 3: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() io_setup(0x14, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x230}, 0x0]) io_pgetevents(r1, 0x100000001, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)={&(0x7f00000000c0)={0xffffffffffff4798}, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x50975555550000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x1000000, 0x7ff0bdbe}) [ 455.995906][T17911] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 456.101281][T17924] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x70710000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x2000000, 0x7ff0bdbe}) 15:35:39 executing program 3: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffffffffffd, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r2, 0x0, r1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="98000001cd4e0000000000006100003bb70000100000001815000000", @ANYRES32=r3, @ANYBLOB="0000000000000000fdf9040010000000950000000000000095000000000000008500000014000000850000004c000000"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x8e, &(0x7f0000000600)=""/142, 0x41f00, 0x1, [], 0x0, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r5, 0xc0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x401, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x4, 0x5}, 0x0, 0x0, &(0x7f0000001140)={0x5, 0x10, 0x4, 0x7}, &(0x7f0000001180)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r4, 0x0, 0x9, &(0x7f0000001300)='cgomners\x00', r6}, 0x69d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x0, 0xe, &(0x7f00000001c0)='memory.events\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='/\x00', r6}, 0x30) tkill(r7, 0x28) r8 = gettid() seccomp(0x1, 0x3, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0xffffffff7fffffff, 0x3, 0x9}, {0xfffffffffffffc01, 0x7, 0x40, 0x1}, {0x4, 0xfffffffffffffc64, 0x3, 0x3fffffff80}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r8, 0x1000000000016) [ 456.428306][T17933] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 456.528227][T17941] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000000c0)=0x2, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) 15:35:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xe0700000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:41 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x3000000, 0x7ff0bdbe}) [ 458.796101][T17950] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 458.821799][T17952] usb usb2: usbfs: process 17952 (syz-executor.3) did not claim interface 0 before use [ 458.846291][T17952] vhci_hcd: default hub control req: a100 v0000 i0000 l16 15:35:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xf0500000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4000000, 0x7ff0bdbe}) 15:35:41 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r5, 0x138) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000006c0)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1c4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fffffff, @empty, 0x401}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffeff}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xf0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x173d66a}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x2e}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x40000}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaad}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x41e6}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4080}, 0x10) fsetxattr$system_posix_acl(r5, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040001000000000008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000400000"], 0x3c, 0x1) fchownat(r2, &(0x7f0000000300)='./file0\x00', r3, r4, 0x800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) r6 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r6, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="053c6afa3385b01ed0fd8ed39214b26f23f1d8f992d8f9a9a1b727420468d304f75900481cee6ab7c2de0204721ec2ebc3dea8e799bf313575577a93a4dbebe68fdccb342e015ab7f1049c2ec389b3ff34e5cefe329bc8c359d6afec9a45fb0f164cdd8f489d7fbc34a95b825b90eae5cb6efbdf8275f9e73490148beb669f4c8f4d5c48aa3e7cdc5aba17b359992b10b5bca4899245f8de5cb5e2e57f857760eed6a0c81447cb2bf228877791baf981a3fb303853eeaf11d50f04b00d8e7fe823f95592370c340cc46a2fdfa21721ba5dfd3656e3a9ca8b0c24164a97e4f6a2", 0xe0, r6) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r7, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9}, &(0x7f00000002c0)=0x10) r8 = dup3(r0, r0, 0x80000) accept4$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80000) 15:35:41 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x614f7e4cae293dca) write$P9_RFLUSH(r1, &(0x7f0000000380)={0x7, 0x6d, 0x2}, 0x7) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x800, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache'}], [{@appraise='appraise'}, {@permit_directio='permit_directio'}, {@subj_role={'subj_role', 0x3d, '/selinux/policy\x00'}}, {@hash='hash'}, {@fsname={'fsname', 0x3d, '/selinux/policy\x00'}}, {@uid_lt={'uid<', r3}}, {@obj_role={'obj_role', 0x3d, '/selinux/policy\x00'}}]}}) socket$key(0xf, 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000300)) 15:35:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x100000000000000, 0x0, 0x0, 0x7ff0bdbe}) [ 459.030118][T17963] usb usb2: usbfs: process 17963 (syz-executor.3) did not claim interface 0 before use [ 459.049204][T17963] vhci_hcd: default hub control req: a100 v0000 i0000 l16 [ 459.059650][T17968] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x5000000, 0x7ff0bdbe}) 15:35:42 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x200000000000000, 0x0, 0x0, 0x7ff0bdbe}) [ 459.192292][T17976] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 459.203960][T17983] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 459.227826][T17984] usb usb2: usbfs: process 17984 (syz-executor.3) did not claim interface 0 before use 15:35:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x5, 0xfffffffffdffffff, &(0x7f0000051ff0)={r1, r2+10000000}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x181400, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x1, 0x0, 0x2}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) [ 459.245786][T17984] vhci_hcd: default hub control req: a100 v0000 i0000 l16 15:35:42 executing program 4: ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000000)={0x2f0573b2e5677871, 0x6000, 0x6, 0x93c388bf5d7d296a, 0x1f}) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x40) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00000000c0)) clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 15:35:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6000000, 0x7ff0bdbe}) [ 459.412283][T17999] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x300000000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:42 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000)={0x86d, 0x5}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 15:35:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x7000000, 0x7ff0bdbe}) 15:35:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:42 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f00000000c0)=0x80, 0x800) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e23, 0x1000, @remote, 0x4}}, 0x0, 0x7fff, 0x0, "afd3582b8967c4272e5cdfd37aeac8ece63419fc98d155b6802fc38eb5d04abf4965c17e1842b976c515a969cf2edc9b28833ea95bcb6f32def418aca5032541e57c453e9aff382af6e1b4a9d68a5498"}, 0xfffffffffffffdd4) 15:35:42 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 459.872467][T18012] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x8000000, 0x7ff0bdbe}) 15:35:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x400000000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0x7a, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={r5, 0x61, "1b060554861de6f7a76f54cbe4b7ac39ec9e995ed0cc4a32742be4d9b3e0dc1bb6aaca09dd6335fd49763a1975197942be4b839405678bd49936b2c27b2e8ee1775fe181ee6bb45325f08cd4a65be1ed388cc8f001053cd6a3027ca97e39f0b461"}, &(0x7f0000000140)=0x69) tkill(r1, 0x1000000000016) 15:35:43 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={r1, r2+10000000}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:43 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 460.046086][T18032] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 460.065076][T18033] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xa000000, 0x7ff0bdbe}) 15:35:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x500000000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:43 executing program 3: r0 = syz_open_dev$usb(0x0, 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x10000000, 0x7ff0bdbe}) [ 460.214648][T18050] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 460.329206][T18061] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x600000000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:43 executing program 3: r0 = syz_open_dev$usb(0x0, 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x20000000, 0x7ff0bdbe}) 15:35:43 executing program 2: openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f00000000c0)={0x4, 0x0, [{}, {}, {}, {}]}) preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) fcntl$setstatus(r9, 0x4, 0x800) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x1}) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r11, 0x400c6615, &(0x7f00000002c0)) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r12, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_DQBUF(r12, 0xc0585611, &(0x7f0000000180)={0x7, 0xfa5897cd82df026e, 0x4, 0x2000e001, {0x0, 0x7530}, {0x0, 0xc, 0x10000, 0x2, 0x82b, 0x8001, "95ed7b10"}, 0xb9c8, 0x1, @offset=0x1000, 0x4}) 15:35:43 executing program 3: r0 = syz_open_dev$usb(0x0, 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 460.780254][T18072] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 460.935274][T18078] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:43 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:43 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x202, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x100) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r16, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r5, r1, r6, r1, 0xffffffffffffffff, r9, r12, r13, r16], 0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x700000000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x3f000000, 0x7ff0bdbe}) 15:35:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x800000000000000, 0x0, 0x0, 0x7ff0bdbe}) [ 461.066483][T18091] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x40000000, 0x7ff0bdbe}) 15:35:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfc05, 0x40) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)) preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TCFLSH(r1, 0x540b, 0x180000000) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x7, 0x7}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 15:35:44 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x22040, 0x0) r1 = syz_open_procfs(0x0, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) accept$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000b80)={@local, 0x0}, &(0x7f0000000bc0)=0x14) accept$packet(r1, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50010903}, 0xc, &(0x7f0000001000)={&(0x7f0000001940)=ANY=[@ANYBLOB="5c030000", @ANYRES16, @ANYRES32, @ANYBLOB="2c0102006c696e6b75700000000000000000000000000000000000000000000800030006000000040004000800060000000600000000000000000000fc69736c7cabdf611136954b6364264fa861ed7ef70f41abefd830ff69caa4da6b69cb5209a3fef12cedac7ce3051c6cc088629f98aaeabab92c4a06df059673891c76407121cd91f603268c7c760277b4fbb9795dd400d2884c3f8de8b9f809af8d57b60ffd8f63fde1238454dbfce84b870c1a3ec475894e1de1233071723f209cf0d5cc6709ad660cbe3b55a1d51dca930d420f384d6620659f244e732de7", @ANYRES16=0x0, @ANYRES16, @ANYBLOB="83f18e82ec639988d00b92645499219e8bbc87902383a4d11fd26b0179da52ce97b5ccb110c0b61f3501204999c1909c37516bef9655b9cfb267c26be2e1787ea44aeba1eba05a6f35f471835249036a8e52d44004d2503748b3", @ANYBLOB="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", @ANYRES32, @ANYBLOB="3001020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000000000000000000000000000080003000600000004000400080006", @ANYRES32=r2, @ANYRES32=r3, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRES32=r4, @ANYBLOB="400002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040010) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) r6 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r6, 0x1000000000016) 15:35:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x4000000000000000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x48000000, 0x7ff0bdbe}) 15:35:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 461.646776][T18114] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xa100000000000000, 0x0, 0x0, 0x7ff0bdbe}) [ 461.780859][T18133] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:44 executing program 4: prctl$PR_SET_PDEATHSIG(0x1, 0x22) clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x4, @thr={&(0x7f0000000240), &(0x7f0000000380)="c10742133ab30ea315974e69edc6f0a4046141c13b13aa35881b15e21e07ef29334f0ab46d999ebff6cd4de2121d1fdf55b2749999c81e5bef46e80b54a739b942b93bb1bf4d7ebd1d31932696cf358c5347f4438a476c33cf2b848a3c54fba6ed6074c8d5f44faf0b2906394887091a1b4640d82fcb47ad3cb2bcf30b0ab99a5afcc1f9c0734bf56bbfed5d475c38b92beffe3db1946e5ed382204e105acc3b44fb558593e727a5cd0eee92ccd2ed238713a0182b61b712774d50699114708dc5fdec9b743929b30bb897b08eb42833f43d79e43941da8df3651eb1ca951fbec2813417969b833ceac05411b831"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x5, &(0x7f0000000000)={0x0, 0x1b, 0x7, @thr={&(0x7f00000000c0)="b92fbcca33c16ae32ba8e9a1ac6f4627a97d11d9de874cf4d999f27571a8029a649a104fb83fe06b4c1a7fcb2a18be61bae18cd9bba1a16e5365b7e6a16d9fb68c7c1d193cbd238e2bcec2c4963a4bb2d7b2aeef6131c268cb10d504d723c9bfbfcfd2f0675fe210251e9a957aaccccbdf88b394f986213d48a5781ebf0e27461c3dac90f764aca600411721184c16212e2e6d8ba66c8feb57237ade00d5", &(0x7f0000000180)="a6b57aa8860f59915fb0a43db81608c16edf37a696d0f2d5e1ce22e490b75ec283130ec336b4239b06103b9edf59ea57a21bbb53807ac87a6f603f4e944b9f801c76efb14c2f2c0a1c08bf72c8f708e6f0a2e86dff14871ad0146c6c53c412a8d991721249d48f2d033381eb37ff43c948fe3cc5bfa137a3af55d237f9cb9a7cd5cdcfae26f225a6f8bacccae19642"}}, &(0x7f0000000240)) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xff00000000000000, 0x0, 0x0, 0x7ff0bdbe}) [ 461.823906][T18127] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4c000000, 0x7ff0bdbe}) 15:35:45 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xffefffffff7f0000, 0x0, 0x0, 0x7ff0bdbe}) 15:35:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001600)="11dca5055e18cfe47bf07057a8bc99b5d94da06a6527d13fe3ff1a395ba8ecabe9079d02000000af8e36a5a59f49546098db70691ab5c5b6bb8989cb2a2f9465f27c7044f310b7f9ba30addb318f50b88c86f2572d499124d4ab25") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e23, 0x12c4, @ipv4={[], [], @loopback}, 0x100}, {0xa, 0x4e21, 0xffffffffffff0001, @local, 0x1}, 0x1, [0x40, 0x9, 0xfffffffffffffc00, 0x4, 0xfffffffffffffc01, 0x8, 0x2, 0xffff]}, 0x5c) preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000240)={'lapb0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r3 = semget$private(0x0, 0x207, 0x0) semtimedop(r3, &(0x7f0000000000)=[{0x0, 0x3}], 0x1, 0x0) semtimedop(r3, &(0x7f0000000300)=[{0x2, 0x5, 0x1000}], 0x1, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f00000003c0)) timer_create(0x0, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timer_create(0x7, &(0x7f0000001500)={0x0, 0x28, 0x1, @thr={&(0x7f0000000440)="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", &(0x7f0000001440)="a686d3f07fe27bb2004f79b869d76de7264ccb0bf270a328e4be6ca2ef0093565dbb13fe16bc7e86046538fff28494d5af2e4a8b833d570362b1191418b67e0c66db84323ba0a225b8cd505d58d4839f757d4d10d2786c500d8bde152d446dde5dc95a23d60ec81fce7c5ae43a1f2c5632caa1abff37d0771f83f3b6cd1788f3fd8406da520ac7b3fc156c2da1a84733435a1eac094cbc193887fb7d73e8a873ffd19d5fc7a8f28a947c21940b03d5a59b901464a70ecea4a858eb"}}, &(0x7f0000001540)=0x0) timer_settime(r7, 0x1, &(0x7f0000000080)={{r5, r6+10000000}, {0x0, 0x1c9c380}}, 0x0) r8 = gettid() umount2(&(0x7f0000000380)='./file0\x00', 0x8ad358c5f26d4cd2) r9 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000000c0)={{0x6, 0xc, 0x8, 0x2, 'syz1\x00', 0x3}, 0x3, 0x0, 0xc0c1, r9, 0x3, 0x1000, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x00'], 0x3, [], [0x9, 0xfffffffffffffffb, 0x2, 0x9]}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) mmap(&(0x7f0000288000/0x1000)=nil, 0x1000, 0x3000007, 0x11, r11, 0x3) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x1bd1c3, 0x0) tkill(r8, 0x1000000000016) 15:35:45 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xffffffff00000000, 0x0, 0x0, 0x7ff0bdbe}) [ 462.544776][T18161] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x60000000, 0x7ff0bdbe}) 15:35:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0xffffffffff600000, 0x0, 0x0, 0x7ff0bdbe}) [ 462.682143][T18173] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 462.729718][T18176] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:47 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) dup2(r2, r5) 15:35:47 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x2, 0x0, 0x7ff0bdbe}) 15:35:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x68000000, 0x7ff0bdbe}) 15:35:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x3, 0x0, 0x7ff0bdbe}) 15:35:47 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 464.974085][T18188] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 465.044179][T18194] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40800, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x198, r3, 0x500, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x124, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3ea}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66e4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x50) tkill(r1, 0x1000000000016) 15:35:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6c000000, 0x7ff0bdbe}) 15:35:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 15:35:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x4, 0x0, 0x7ff0bdbe}) 15:35:48 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000004480)={0x9, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x40000) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x8, 0x101000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000280)=""/99, &(0x7f0000000300)=0x63) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000240)) r4 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x4000) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) tkill(r4, 0x1000000000016) r6 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, r6, 0x0, 0x0, 0xfffffffffffffff8) r7 = request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000180)='em1\x00', r6) keyctl$setperm(0x5, r7, 0x10) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffffa, 0xd, 0x2, {{0x2, 0x2, 0x2}, 0x20000000007}}, 0x2) 15:35:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x5, 0x0, 0x7ff0bdbe}) 15:35:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) [ 465.586861][T18216] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x74000000, 0x7ff0bdbe}) 15:35:48 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x3, @thr={&(0x7f00000000c0)="539809db79b1259cfd13570e1622f71862d365c43e837f05a31338a3453a38e26698c4bb55ab1312342b879cc2a90a509c55f166c8e39f979a3f969473434e2cae6d25850c85311ec1bdc4310732d206b3e51e22a6293fe7d0278dcafddb19167d4c164f8f532f545b7f0c073c28d6c96daa9dbde52ea266d0b7aa4d537b41e70b65cf735eecf27f0294b7ac0894848d96581cff9ba5c4817e8ef99cc02d637fd95ae120d1948e7b0e08862b293908d3b60c33e2604003efb7b6627e79d5f10e73bcb2df9b4c198583c2df563f20e205a23912b5560b352d9dd7e8bfa564ed797a277847580bb02ed3d72d9c9d27d20d", &(0x7f0000000000)="bc6d7336eb3fdf668e9d6327d7a965c6f00cb6cdfb7a54c5b7227d45adc84be19cef8ef9461c6d52a5fc04a0fc2cca7e0667a3"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 465.732277][T18229] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 15:35:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x6, 0x0, 0x7ff0bdbe}) 15:35:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) mq_notify(r1, &(0x7f0000000000)={0x0, 0x30, 0x4, @tid=r2}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) prctl$PR_GET_CHILD_SUBREAPER(0x25) 15:35:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x7a000000, 0x7ff0bdbe}) 15:35:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x7, 0x0, 0x7ff0bdbe}) 15:35:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xc0185500, 0x7ff0bdbe}) 15:35:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 465.944553][T18249] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:49 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xff000000, 0x7ff0bdbe}) [ 466.046301][T18259] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 466.082838][T18257] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:49 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x8, 0x0, 0x7ff0bdbe}) 15:35:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000cab000)=0x4cb) setresuid(0x0, r6, 0x0) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$inet6_sctp(0xa, 0x1, 0x84) setresuid(0x0, r10, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() r13 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r13, 0x138) fsetxattr$system_posix_acl(r13, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0409010000c0eef1944a4400000008000100", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x2, r6}, {0x2, 0x2, r8}, {0x2, 0x5, r10}, {0x2, 0x2, r11}], {0x4, 0x1}, [{0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x4, r12}], {0x10, 0x2}, {0x20, 0xe}}, 0x54, 0x2) tkill(r1, 0x1000000000016) 15:35:51 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xa1, 0x0, 0x7ff0bdbe}) 15:35:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x10000000000000, 0x7ff0bdbe}) 15:35:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x300, 0x0, 0x7ff0bdbe}) [ 468.830332][T18288] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:51 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:51 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = mq_open(&(0x7f0000000000)='@&vmnet1\x00', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x7, 0xfffffffffffffffb, 0x4f, 0x86a, 0x3, 0x8, 0xed7}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f00000000c0)="fbf2d757806cd1d247ec483eccedb555a8ed0c63ac1e8a3e91f8e4f001900a1cb160f40c4b7b5fc7d143de46beb3ba180fd587ecbe2414a545f348b6ef8b0cccc1ac6ce74646439751bc3767942882dff7df56b911", 0x55}) r4 = dup3(r2, r1, 0x40000) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x1000, 0x4) tkill(r0, 0x1000000000016) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x4000) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x2000) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) r8 = getegid() r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r9, 0x138) fsetxattr$system_posix_acl(r9, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r8}, {}]}, 0x3c, 0x1) fchownat(r5, &(0x7f0000000180)='./file0\x00', r7, r8, 0x100) 15:35:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x5518c000000000, 0x7ff0bdbe}) 15:35:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x500, 0x0, 0x7ff0bdbe}) [ 468.949753][T18292] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 468.969038][T18298] usb usb2: usbfs: process 18298 (syz-executor.3) did not claim interface 0 before use 15:35:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x200, 0x0, 0x0, 0x0, 0xffffffff, &(0x7f0000000000), 0x7fff, 0x3f, 0x4}) clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x0, @thr={&(0x7f00000000c0)="6a1e12ff4ffe38a0c7adc961a46fc710d8f3d9d2e4e08948e66a226e5bd32f5aeb85cabceb7f6def45d22ce89346aaf2ede59d77270d6c126dcf09ba00976e0973a47a4a3aa7ba25a1fcceda6b5b999a370c365cdddce4db398b862d173abbe79fe5e3b32f80824cda9c716a6b7cc1ea42d859f405ae2213461fb143f088be381721c36f555f168cd1b73c5f6e1b5b648b732a845b20388cfdabfe86cf277f9cefa416174ce0d13df7fb77f0bc4837cbc671ab394e0c9f07bba7af56a071515d171f3d7676805dcef73b9139fd0a98a5549bcb259d4c68f1dcd10046769e7d8f24a3bceddaab6b", &(0x7f00000001c0)="3ca40ba3222a43e56b220ffa8b69b34ee0ce8a7ca959494ccdd65c588ad43ae53169174be38d4365c66c12ebda19abd4e82fa77ab549a1f8da2e8a3402ff47ac54908b62f67ed1e14ad324a01dbe465ad816df2d562c7bb6b243aa1c17f129a0fd031b7f2a4813c3cd6a5c76538b72ce307a4e81395519c76cb0db1bde2c13d8141cd8231f7fbc41c149f66f502e1a4cab77f6bc4ee12886a1f1f23f8a2a825b1a40343fdd8004a6718325d067a26b27f9e838bc7746a27e428b465d7ad8683e6c2045"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) [ 469.029625][T18304] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 469.038143][T18298] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:35:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x600, 0x0, 0x7ff0bdbe}) 15:35:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x100000000000000, 0x7ff0bdbe}) 15:35:52 executing program 3: clock_nanosleep(0x0, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x10, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:35:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:35:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x700, 0x0, 0x7ff0bdbe}) [ 469.209032][T18320] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x200000000000000, 0x7ff0bdbe}) 15:35:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x4000, 0x0, 0x7ff0bdbe}) [ 469.654576][T18337] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 469.741798][T18343] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:35:52 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x800000) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x4, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:35:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x2a, 0x0, @thr={&(0x7f00000000c0)="e915921248f29951906563c59736476ff0087e0b0587fdadc9645f960146343fbda1af3bc6c6fdc9fe5f52f8f98c161ad7a34850247ff1ac2bdff5099e3a026543d156ae53d8da20672a38b363ee6b835a018f04a6d4f8b6f36759a055e20bdc5d20fe035839464157eea57f97c846112661c676904e168ba2e3deaef5f0921b15307c2c77ed8a3ab9da876c7503b361d43e5c2aee3341eb992fe212d277d903d8482650c9ada298cb184a25749b6f110ec67a7107f691d737e2a735e9fed177ec79ef16bea9355d793c44078520eef2117350c7", &(0x7f00000002c0)="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"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:35:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x60ff, 0x0, 0x7ff0bdbe}) 15:35:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x300000000000000, 0x7ff0bdbe}) 15:35:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x7600, 0x0, 0x7ff0bdbe}) [ 469.924688][T18352] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x400000000000000, 0x7ff0bdbe}) 15:35:53 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x9600, 0x0, 0x7ff0bdbe}) [ 470.156495][T18367] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x500000000000000, 0x7ff0bdbe}) [ 470.314537][T18375] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xa100, 0x0, 0x7ff0bdbe}) 15:35:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x600000000000000, 0x7ff0bdbe}) 15:35:53 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x2d, 0xe00081) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000000c0)={0x10001, 0x9, 0x2d, "91606e041cd95056203fd2db3f44a7ca4eb3401e60a587d5dc93906a446a001b22e8dd380b5839fb445b76d81d2ae4403d139035b223942c2d75a755", 0x21, "133a86f14721170e6ffd21d1f4eee9d8594b4fac5f09652d8d137ecea9619ea6feb27cd2ded745720c0a2890c44b64cad755047252d5a3954c9c4cb8", 0x8a7acec67e7531b0}) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0xd1) tkill(r0, 0x1000000000016) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mISDNtimer\x00', 0x80000, 0x0) 15:35:53 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000200)=0x1) ioctl$KDDISABIO(r0, 0x4b37) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x0, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=0x6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r1, 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x34}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000001, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r3, 0x1000000000016) prctl$PR_SET_UNALIGN(0x6, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x18}, 0x5005) 15:35:53 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xff00, 0x0, 0x7ff0bdbe}) 15:35:53 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 470.609526][T18390] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x700000000000000, 0x7ff0bdbe}) 15:35:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) process_vm_writev(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, &(0x7f0000001480)=[{&(0x7f0000001180)=""/73, 0x49}, {&(0x7f0000001200)=""/29, 0x1d}, {&(0x7f0000001240)=""/94, 0x5e}, {&(0x7f00000012c0)=""/133, 0x85}, {&(0x7f0000001380)=""/72, 0x48}, {&(0x7f0000001400)=""/72, 0x48}], 0x6, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x44) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 15:35:53 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f00000000c0)=""/213) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCSTI(r3, 0x5412, 0x6) 15:35:53 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 470.902002][T18410] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 470.999149][T18419] FAULT_INJECTION: forcing a failure. [ 470.999149][T18419] name failslab, interval 1, probability 0, space 0, times 0 [ 471.051251][T18419] CPU: 0 PID: 18419 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 471.058750][T18419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.068807][T18419] Call Trace: [ 471.072103][T18419] dump_stack+0x172/0x1f0 [ 471.076554][T18419] should_fail.cold+0xa/0x15 [ 471.081165][T18419] ? fault_create_debugfs_attr+0x180/0x180 [ 471.086999][T18419] ? lock_downgrade+0x920/0x920 [ 471.091869][T18419] ? ___might_sleep+0x163/0x280 [ 471.096733][T18419] __should_failslab+0x121/0x190 [ 471.101685][T18419] should_failslab+0x9/0x14 [ 471.106198][T18419] __kmalloc+0x2e0/0x770 [ 471.110453][T18419] ? mark_held_locks+0xf0/0xf0 [ 471.115247][T18419] ? _parse_integer+0x190/0x190 [ 471.120116][T18419] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 471.125853][T18419] tomoyo_realpath_from_path+0xcd/0x7b0 [ 471.131547][T18419] ? tomoyo_path_number_perm+0x193/0x520 [ 471.137205][T18419] tomoyo_path_number_perm+0x1dd/0x520 [ 471.142690][T18419] ? tomoyo_path_number_perm+0x193/0x520 [ 471.148345][T18419] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 471.154162][T18419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.160421][T18419] ? ___might_sleep+0x163/0x280 [ 471.165317][T18419] ? selinux_file_mprotect+0x620/0x620 [ 471.170790][T18419] ? __fget+0x384/0x560 [ 471.174957][T18419] ? ksys_dup3+0x3e0/0x3e0 [ 471.179380][T18419] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 471.185627][T18419] ? fput_many+0x12c/0x1a0 [ 471.190033][T18419] tomoyo_file_ioctl+0x23/0x30 [ 471.194790][T18419] security_file_ioctl+0x77/0xc0 [ 471.199716][T18419] ksys_ioctl+0x57/0xd0 [ 471.203858][T18419] __x64_sys_ioctl+0x73/0xb0 [ 471.208436][T18419] do_syscall_64+0xfd/0x6a0 [ 471.212950][T18419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.218961][T18419] RIP: 0033:0x4598e9 [ 471.222861][T18419] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 471.242892][T18419] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.251319][T18419] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 [ 471.259288][T18419] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 471.267245][T18419] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 471.275212][T18419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 [ 471.283169][T18419] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 [ 471.292381][T18419] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.299321][T18419] usb usb2: usbfs: process 18419 (syz-executor.3) did not claim interface 0 before use [ 471.309567][T18419] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:35:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x800000000000000, 0x7ff0bdbe}) 15:35:54 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x400000, 0x0, 0x7ff0bdbe}) 15:35:54 executing program 2: r0 = getpid() waitid(0x0, r0, &(0x7f00000000c0), 0x40000000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x7, &(0x7f0000000000)="1ddca50d5e0b2037001b0270") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) getpgrp(r0) r2 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r2) timer_create(0x1, &(0x7f0000066000)={0x0, 0x20, 0x3, @tid=r2}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x9, 0x1, 0xfff, 0x1, 0x5}, 0xc) r4 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r4, 0x1000000000016) 15:35:54 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012, 0x0, @thr={&(0x7f0000000000)="c36918cd5a89b1fbb071afeddaf01b9dc58fbcf18061cc129eb4b6fd6d42a1d9602609", &(0x7f00000000c0)="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"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x200004, 0x0) mmap(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x300000f, 0x100000000000031, r1, 0x0) tkill(r0, 0x1000000000016) 15:35:54 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xa00000000000000, 0x7ff0bdbe}) 15:35:54 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x50f000, 0x0, 0x7ff0bdbe}) [ 471.477567][T18432] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 471.499560][T18437] FAULT_INJECTION: forcing a failure. [ 471.499560][T18437] name failslab, interval 1, probability 0, space 0, times 0 [ 471.588322][T18446] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 471.598201][T18437] CPU: 1 PID: 18437 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 471.606928][T18437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.616990][T18437] Call Trace: [ 471.617014][T18437] dump_stack+0x172/0x1f0 [ 471.617036][T18437] should_fail.cold+0xa/0x15 [ 471.617050][T18437] ? fault_create_debugfs_attr+0x180/0x180 [ 471.617073][T18437] ? ___might_sleep+0x163/0x280 [ 471.624673][T18437] __should_failslab+0x121/0x190 [ 471.624691][T18437] should_failslab+0x9/0x14 [ 471.624703][T18437] __kmalloc+0x2e0/0x770 [ 471.624724][T18437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.635106][T18437] ? d_absolute_path+0x11b/0x170 [ 471.635117][T18437] ? __d_path+0x140/0x140 [ 471.635131][T18437] ? tomoyo_encode2.part.0+0xf5/0x400 [ 471.635145][T18437] tomoyo_encode2.part.0+0xf5/0x400 [ 471.635163][T18437] tomoyo_encode+0x2b/0x50 15:35:54 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x707100, 0x0, 0x7ff0bdbe}) [ 471.635174][T18437] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 471.635191][T18437] tomoyo_path_number_perm+0x1dd/0x520 [ 471.635209][T18437] ? tomoyo_path_number_perm+0x193/0x520 [ 471.644974][T18437] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 471.644990][T18437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.645009][T18437] ? ___might_sleep+0x163/0x280 [ 471.645035][T18437] ? selinux_file_mprotect+0x620/0x620 [ 471.645052][T18437] ? __fget+0x384/0x560 [ 471.653768][T18437] ? ksys_dup3+0x3e0/0x3e0 [ 471.653784][T18437] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 15:35:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x1000000000000000, 0x7ff0bdbe}) [ 471.653798][T18437] ? fput_many+0x12c/0x1a0 [ 471.653812][T18437] tomoyo_file_ioctl+0x23/0x30 [ 471.653826][T18437] security_file_ioctl+0x77/0xc0 [ 471.653842][T18437] ksys_ioctl+0x57/0xd0 [ 471.664986][T18437] __x64_sys_ioctl+0x73/0xb0 [ 471.665003][T18437] do_syscall_64+0xfd/0x6a0 [ 471.665021][T18437] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.665036][T18437] RIP: 0033:0x4598e9 [ 471.674694][T18437] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 471.674701][T18437] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.674714][T18437] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 [ 471.674721][T18437] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 471.674729][T18437] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 471.674736][T18437] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 15:35:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x2000000000000000, 0x7ff0bdbe}) 15:35:54 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x70e000, 0x0, 0x7ff0bdbe}) [ 471.674744][T18437] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 [ 471.683504][T18437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 471.699826][T18437] usb usb2: usbfs: process 18437 (syz-executor.3) did not claim interface 0 before use [ 471.852367][T18453] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 471.857463][T18437] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 471.947734][T18458] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:35:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:55 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:55 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x7ff0bdbe}) [ 472.378863][T18469] usb usb2: usbfs: process 18469 (syz-executor.3) did not claim interface 0 before use [ 472.398858][T18469] FAULT_INJECTION: forcing a failure. [ 472.398858][T18469] name failslab, interval 1, probability 0, space 0, times 0 [ 472.414638][T18469] CPU: 1 PID: 18469 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 472.425217][T18469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.435308][T18469] Call Trace: [ 472.438632][T18469] dump_stack+0x172/0x1f0 [ 472.442997][T18469] should_fail.cold+0xa/0x15 [ 472.447609][T18469] ? __sched_text_start+0x8/0x8 [ 472.452483][T18469] ? fault_create_debugfs_attr+0x180/0x180 [ 472.458302][T18469] ? page_to_nid.part.0+0x20/0x20 [ 472.463577][T18469] ? ___might_sleep+0x163/0x280 [ 472.468435][T18469] __should_failslab+0x121/0x190 [ 472.476541][T18469] should_failslab+0x9/0x14 [ 472.481072][T18469] __kmalloc_track_caller+0x2dc/0x760 [ 472.486624][T18469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.493052][T18469] ? wake_up_klogd+0x99/0xd0 [ 472.497892][T18469] ? vprintk_emit+0x2c8/0x700 [ 472.502572][T18469] ? vprintk_emit+0x1ea/0x700 [ 472.507256][T18469] ? kstrdup_const+0x66/0x80 [ 472.511843][T18469] kstrdup+0x3a/0x70 [ 472.515731][T18469] kstrdup_const+0x66/0x80 [ 472.520141][T18469] __kernfs_new_node+0xb1/0x6c0 [ 472.524987][T18469] ? devm_device_remove_groups.cold+0x18/0x18 [ 472.531042][T18469] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 472.536483][T18469] ? __kasan_check_read+0x11/0x20 [ 472.542457][T18469] ? lock_downgrade+0x920/0x920 [ 472.547294][T18469] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 472.553433][T18469] ? __kasan_check_read+0x11/0x20 [ 472.558626][T18469] ? __kasan_check_write+0x14/0x20 [ 472.563722][T18469] kernfs_new_node+0x96/0x120 [ 472.568412][T18469] kernfs_create_link+0xd7/0x250 [ 472.573361][T18469] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 472.579333][T18469] sysfs_create_link+0x65/0xc0 [ 472.584087][T18469] driver_sysfs_add+0xf4/0x280 [ 472.588836][T18469] device_bind_driver+0x19/0xd0 [ 472.593695][T18469] usb_driver_claim_interface+0x249/0x430 [ 472.599427][T18469] claimintf+0x11b/0x1d0 [ 472.603656][T18469] checkintf.cold+0x89/0x98 [ 472.608212][T18469] check_ctrlrecip+0x162/0x2a0 [ 472.612959][T18469] proc_control+0xe1/0x720 [ 472.617363][T18469] ? __kasan_check_write+0x14/0x20 [ 472.622456][T18469] ? check_ctrlrecip+0x2a0/0x2a0 [ 472.627394][T18469] ? rwlock_bug.part.0+0x90/0x90 [ 472.632512][T18469] usbdev_do_ioctl+0x1b5a/0x2d10 [ 472.637435][T18469] ? proc_do_submiturb+0x3520/0x3520 [ 472.642702][T18469] ? trace_hardirqs_on+0x67/0x240 [ 472.647713][T18469] ? tomoyo_path_number_perm+0x459/0x520 [ 472.653342][T18469] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 472.659570][T18469] ? tomoyo_path_number_perm+0x263/0x520 [ 472.665197][T18469] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 472.671441][T18469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.677673][T18469] ? ___might_sleep+0x163/0x280 [ 472.682511][T18469] ? usbdev_compat_ioctl+0x30/0x30 [ 472.687604][T18469] usbdev_ioctl+0x26/0x30 [ 472.691928][T18469] do_vfs_ioctl+0xdb6/0x13e0 [ 472.696507][T18469] ? ioctl_preallocate+0x210/0x210 [ 472.701606][T18469] ? selinux_file_mprotect+0x620/0x620 [ 472.707051][T18469] ? __fget+0x384/0x560 [ 472.711193][T18469] ? ksys_dup3+0x3e0/0x3e0 [ 472.715596][T18469] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 472.721833][T18469] ? fput_many+0x12c/0x1a0 [ 472.726236][T18469] ? tomoyo_file_ioctl+0x23/0x30 [ 472.731185][T18469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.737424][T18469] ? security_file_ioctl+0x8d/0xc0 [ 472.742602][T18469] ksys_ioctl+0xab/0xd0 [ 472.746743][T18469] __x64_sys_ioctl+0x73/0xb0 [ 472.751316][T18469] do_syscall_64+0xfd/0x6a0 [ 472.755854][T18469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.761742][T18469] RIP: 0033:0x4598e9 [ 472.765624][T18469] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.785209][T18469] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.793616][T18469] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 [ 472.801569][T18469] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 472.809521][T18469] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 472.817565][T18469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 [ 472.825522][T18469] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 15:35:57 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) fcntl$getown(r2, 0x9) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1300000036ffff018000000600395032303030"], 0x13) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x26f) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="1300000036ffff018000000600395032303030"], 0x13) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x26f) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRESDEC=r6, @ANYRES16=0x0], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r7, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40045) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x22020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40400cd) 15:35:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x717000, 0x0, 0x7ff0bdbe}) 15:35:57 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4000000000000000, 0x7ff0bdbe}) 15:35:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x2, 0xa3c1aa0d95e7bb7c, 0x1000, &(0x7f0000933000/0x1000)=nil}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdfffffd, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000000000000000000800000000000000000000000000000000000000500000000000000000001000000000000000000001000"/82]) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xfffffffffffffff7, 0x1, 0x2, 0x5, 0x5}) r4 = gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x4000) write$rfkill(r5, &(0x7f0000000140)={0x20, 0x4}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x4000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x200000, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r4, 0x1000000000016) 15:35:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x760000, 0x0, 0x7ff0bdbe}) [ 474.526192][T18486] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 474.529851][T18491] usb usb2: usbfs: process 18491 (syz-executor.3) did not claim interface 0 before use [ 474.549494][T18491] FAULT_INJECTION: forcing a failure. [ 474.549494][T18491] name failslab, interval 1, probability 0, space 0, times 0 [ 474.565246][T18491] CPU: 0 PID: 18491 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 474.572723][T18491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.572728][T18491] Call Trace: [ 474.572752][T18491] dump_stack+0x172/0x1f0 [ 474.572771][T18491] should_fail.cold+0xa/0x15 [ 474.572783][T18491] ? page_to_nid.part.0+0x20/0x20 [ 474.572796][T18491] ? fault_create_debugfs_attr+0x180/0x180 [ 474.572808][T18491] ? page_to_nid.part.0+0x20/0x20 [ 474.572822][T18491] ? ___might_sleep+0x163/0x280 [ 474.572839][T18491] __should_failslab+0x121/0x190 [ 474.572852][T18491] should_failslab+0x9/0x14 [ 474.572870][T18491] kmem_cache_alloc+0x2aa/0x710 [ 474.590701][T18491] ? memcpy+0x46/0x50 [ 474.600273][T18491] ? kstrdup+0x5a/0x70 [ 474.600295][T18491] __kernfs_new_node+0xf0/0x6c0 [ 474.611095][T18491] ? devm_device_remove_groups.cold+0x18/0x18 [ 474.611113][T18491] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 474.611131][T18491] ? __kasan_check_read+0x11/0x20 [ 474.659775][T18491] ? lock_downgrade+0x920/0x920 [ 474.664636][T18491] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 474.670802][T18491] ? __kasan_check_read+0x11/0x20 15:35:57 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x1c, 0x2, @tid=r0}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) r2 = gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) accept(r3, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@empty, @multicast1, 0x0}, &(0x7f0000000240)=0xc) connect$can_bcm(r4, &(0x7f0000000280)={0x1d, r5}, 0x10) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000ab5000/0x3000)=nil, 0x3000, 0xeed3b2569ebb3e36, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) [ 474.675836][T18491] ? __kasan_check_write+0x14/0x20 [ 474.680980][T18491] kernfs_new_node+0x96/0x120 [ 474.685664][T18491] kernfs_create_link+0xd7/0x250 [ 474.690595][T18491] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 474.690613][T18491] sysfs_create_link+0x65/0xc0 [ 474.704734][T18491] driver_sysfs_add+0xf4/0x280 [ 474.709517][T18491] device_bind_driver+0x19/0xd0 [ 474.714387][T18491] usb_driver_claim_interface+0x249/0x430 [ 474.714403][T18491] claimintf+0x11b/0x1d0 [ 474.714422][T18491] checkintf.cold+0x89/0x98 [ 474.724360][T18491] check_ctrlrecip+0x162/0x2a0 [ 474.724377][T18491] proc_control+0xe1/0x720 [ 474.738024][T18491] ? __kasan_check_write+0x14/0x20 [ 474.743148][T18491] ? check_ctrlrecip+0x2a0/0x2a0 [ 474.748131][T18491] ? rwlock_bug.part.0+0x90/0x90 [ 474.753081][T18491] usbdev_do_ioctl+0x1b5a/0x2d10 [ 474.758021][T18491] ? proc_do_submiturb+0x3520/0x3520 [ 474.763299][T18491] ? trace_hardirqs_on+0x67/0x240 [ 474.768309][T18491] ? tomoyo_path_number_perm+0x459/0x520 [ 474.773924][T18491] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 474.780147][T18491] ? tomoyo_path_number_perm+0x263/0x520 [ 474.785783][T18491] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 474.791572][T18491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.797799][T18491] ? ___might_sleep+0x163/0x280 [ 474.802632][T18491] ? usbdev_compat_ioctl+0x30/0x30 [ 474.807728][T18491] usbdev_ioctl+0x26/0x30 [ 474.812041][T18491] do_vfs_ioctl+0xdb6/0x13e0 [ 474.816612][T18491] ? ioctl_preallocate+0x210/0x210 [ 474.821711][T18491] ? selinux_file_mprotect+0x620/0x620 [ 474.827152][T18491] ? __fget+0x384/0x560 [ 474.831293][T18491] ? ksys_dup3+0x3e0/0x3e0 [ 474.835703][T18491] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 474.841925][T18491] ? fput_many+0x12c/0x1a0 [ 474.846339][T18491] ? tomoyo_file_ioctl+0x23/0x30 [ 474.851258][T18491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.857478][T18491] ? security_file_ioctl+0x8d/0xc0 [ 474.862573][T18491] ksys_ioctl+0xab/0xd0 [ 474.866727][T18491] __x64_sys_ioctl+0x73/0xb0 [ 474.871306][T18491] do_syscall_64+0xfd/0x6a0 [ 474.875798][T18491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.881703][T18491] RIP: 0033:0x4598e9 [ 474.885586][T18491] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.905178][T18491] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.913669][T18491] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 [ 474.921716][T18491] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 474.929755][T18491] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 474.937717][T18491] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 [ 474.945676][T18491] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 15:35:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x960000, 0x0, 0x7ff0bdbe}) 15:35:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4800000000000000, 0x7ff0bdbe}) 15:35:57 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 475.015907][T18502] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 475.125025][T18513] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 475.152755][T18514] usb usb2: usbfs: process 18514 (syz-executor.3) did not claim interface 0 before use [ 475.163173][T18514] FAULT_INJECTION: forcing a failure. 15:35:58 executing program 2: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) sendmsg$key(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x2, 0xe, 0x2, 0x0, 0x4, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}]}, 0x20}}, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='user,\x00', r2}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r4, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x9, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x3}, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0xffffffff, 0x8}, &(0x7f0000000300)=0x55bc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x1000}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r0, r3, 0x0, 0x2a, &(0x7f0000000200)='posix_acl_accesseth1@eth1cpuset-systemppp1', r5}, 0xffffffffffffff25) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r8 = syz_open_procfs(0x0, 0x0) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockname$packet(r8, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) accept$packet(r8, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_mreq(r8, 0x29, 0x0, &(0x7f0000000b80)={@local, 0x0}, &(0x7f0000000bc0)=0x14) accept$packet(r8, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000001040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x23000}, 0xc, &(0x7f0000001000)={&(0x7f0000001940)=ANY=[@ANYBLOB="5c030000", @ANYRES16, @ANYRES32, @ANYBLOB="2c0102006c696e6b75700000000000000000000000000000000000000000000800030006000000040004000800060000000600000000000000000000fc69736c7cabdf611136954b6364264fa861ed7ef70f41abefd830ff69caa4da6b69cb5209a3fef12cedac7ce3051c6cc088629f98aaeabab92c4a06df059673891c76407121cd91f603268c7c760277b4fbb9795dd400d2884c3f8de8b9f809af8d57b60ffd8f63fde1238454dbfce84b870c1a3ec475894e1de1233071723f209cf0d5cc6709ad660cbe3b55a1d51dca930d420f384d6620659f244e732de7", @ANYRES16=0x0, @ANYRES16, @ANYBLOB="83f18e82ec639988d00b92645499219e8bbc87902383a4d11fd26b0179da52ce97b5ccb110c0b61f3501204999c1909c37516bef9655b9cfb267c26be2e1787ea44aeba1eba05a6f35f471835249036a8e52d44004d2503748b3", @ANYBLOB="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", @ANYRES32, @ANYBLOB="3001020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000000000000000000000000000080003000600000004000400080006", @ANYRES32=r9, @ANYRES32=r10, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRES32=r11, @ANYBLOB="400002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12], 0x14}, 0x1, 0x0, 0x0, 0xff30e701ca02c2fd}, 0x20040010) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x4, &(0x7f0000000600)=@raw=[@generic={0x1ff, 0x3, 0x8, 0xafe, 0xafeb}, @jmp={0x5, 0x70, 0x2, 0x5, 0xa, 0xfffffffffffffff0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x6d}], &(0x7f0000000640)='syzkaller\x00', 0x4, 0xf6, &(0x7f0000000680)=""/246, 0x41000, 0x1, [], r12, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0xa, 0x408, 0xa558}, 0x10}, 0x70) preadv(r7, &(0x7f0000000100), 0x18d, 0x4000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x1, 0x2, 0x800, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x7}, [@typed={0x8, 0x7e, @ipv4=@dev={0xac, 0x14, 0x14, 0x17}}, @generic="36e6807cc02ae29f5f8ff1f138e343d7c36f0b705c472f6b69f3fd11252063560364d14bf497d5b03f5009b5f6bb31c689b04286ca3b0d132ebb04e8737abcbe95326a0e8130a7b408"]}, 0x68}, 0x1, 0x0, 0x0, 0x40820}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r13}}, 0x18) tkill(r6, 0x1000000000016) [ 475.163173][T18514] name failslab, interval 1, probability 0, space 0, times 0 [ 475.176161][T18514] CPU: 0 PID: 18514 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 475.183632][T18514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.193692][T18514] Call Trace: [ 475.197006][T18514] dump_stack+0x172/0x1f0 [ 475.201356][T18514] should_fail.cold+0xa/0x15 [ 475.205958][T18514] ? mark_held_locks+0xf0/0xf0 [ 475.210747][T18514] ? fault_create_debugfs_attr+0x180/0x180 [ 475.216573][T18514] ? page_to_nid.part.0+0x20/0x20 [ 475.221646][T18514] ? ___might_sleep+0x163/0x280 [ 475.226518][T18514] __should_failslab+0x121/0x190 [ 475.231482][T18514] should_failslab+0x9/0x14 [ 475.236091][T18514] kmem_cache_alloc+0x2aa/0x710 [ 475.240948][T18514] ? kernfs_activate+0x34/0x1f0 [ 475.245808][T18514] ? __mutex_lock+0x45d/0x13c0 [ 475.250580][T18514] __kernfs_new_node+0xf0/0x6c0 [ 475.255437][T18514] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 475.261286][T18514] ? wait_for_completion+0x440/0x440 [ 475.266844][T18514] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 475.273351][T18514] ? __kasan_check_read+0x11/0x20 [ 475.278542][T18514] ? __kasan_check_write+0x14/0x20 [ 475.283675][T18514] kernfs_new_node+0x96/0x120 [ 475.288503][T18514] kernfs_create_link+0xd7/0x250 [ 475.293475][T18514] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 475.299470][T18514] sysfs_create_link+0x65/0xc0 [ 475.304245][T18514] driver_sysfs_add+0x170/0x280 [ 475.309191][T18514] device_bind_driver+0x19/0xd0 [ 475.314052][T18514] usb_driver_claim_interface+0x249/0x430 [ 475.319785][T18514] claimintf+0x11b/0x1d0 15:35:58 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x39965db6fb680de7}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@flushsa={0x1c, 0x1c, 0x400, 0x70bd2b, 0x25dfdbfd, {0xf0}, [@extra_flags={0x8, 0x18, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl(r0, 0x4, &(0x7f0000000200)="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") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000000000)={0x77359400}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x20, 0x7, 0x7, 0x763, 0x4}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x7, 0x4, 0x7}, 0x10) tkill(r2, 0x1000000000016) [ 475.324084][T18514] checkintf.cold+0x89/0x98 [ 475.328603][T18514] check_ctrlrecip+0x162/0x2a0 [ 475.333359][T18514] proc_control+0xe1/0x720 [ 475.333374][T18514] ? __kasan_check_write+0x14/0x20 [ 475.333391][T18514] ? check_ctrlrecip+0x2a0/0x2a0 [ 475.348340][T18514] ? rwlock_bug.part.0+0x90/0x90 [ 475.348368][T18514] usbdev_do_ioctl+0x1b5a/0x2d10 [ 475.358486][T18514] ? proc_do_submiturb+0x3520/0x3520 [ 475.363783][T18514] ? trace_hardirqs_on+0x67/0x240 [ 475.368909][T18514] ? tomoyo_path_number_perm+0x459/0x520 [ 475.374562][T18514] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 475.380816][T18514] ? tomoyo_path_number_perm+0x263/0x520 [ 475.386460][T18514] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 475.392277][T18514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.398522][T18514] ? ___might_sleep+0x163/0x280 [ 475.398542][T18514] ? usbdev_compat_ioctl+0x30/0x30 [ 475.398562][T18514] usbdev_ioctl+0x26/0x30 [ 475.408533][T18514] do_vfs_ioctl+0xdb6/0x13e0 [ 475.408553][T18514] ? ioctl_preallocate+0x210/0x210 [ 475.408568][T18514] ? selinux_file_mprotect+0x620/0x620 [ 475.408578][T18514] ? __fget+0x384/0x560 [ 475.408595][T18514] ? ksys_dup3+0x3e0/0x3e0 [ 475.436774][T18514] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 475.443013][T18514] ? fput_many+0x12c/0x1a0 [ 475.447439][T18514] ? tomoyo_file_ioctl+0x23/0x30 [ 475.452375][T18514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.459731][T18514] ? security_file_ioctl+0x8d/0xc0 [ 475.464830][T18514] ksys_ioctl+0xab/0xd0 [ 475.468974][T18514] __x64_sys_ioctl+0x73/0xb0 15:35:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xe07000, 0x0, 0x7ff0bdbe}) [ 475.473545][T18514] do_syscall_64+0xfd/0x6a0 [ 475.478054][T18514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 475.483946][T18514] RIP: 0033:0x4598e9 [ 475.487828][T18514] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.507418][T18514] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.507430][T18514] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 15:35:58 executing program 3 (fault-call:1 fault-nth:5): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:35:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x7ff0bdbe}) [ 475.507436][T18514] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 475.507443][T18514] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 475.507450][T18514] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 [ 475.507457][T18514] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 15:35:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:35:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xf05000, 0x0, 0x7ff0bdbe}) 15:35:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000000c0)={0x6, 0x1, 0x5, "4d26c5a0687128ff7b1513d3aa67e9397fdb7f81801eba26ad00a667a014c246c533196ad89cb833e9756ef83dd493e1845b921f825a0e6572ae781e", 0x1a, "effc629d0e1c361ddee77b741900138a03dad21d67bd2694d461a99643b816f4a1cde37da94e5c0de641bf76680590a70b5721fe24a30953117dbb9e", 0x80}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) [ 475.697261][T18534] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 475.736769][T18536] usb usb2: usbfs: process 18536 (syz-executor.3) did not claim interface 0 before use [ 475.781765][T18536] FAULT_INJECTION: forcing a failure. [ 475.781765][T18536] name failslab, interval 1, probability 0, space 0, times 0 [ 475.798483][T18536] CPU: 0 PID: 18536 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 475.805980][T18536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.816050][T18536] Call Trace: [ 475.819331][T18536] dump_stack+0x172/0x1f0 [ 475.823652][T18536] should_fail.cold+0xa/0x15 [ 475.828242][T18536] ? mark_held_locks+0xf0/0xf0 [ 475.832989][T18536] ? fault_create_debugfs_attr+0x180/0x180 [ 475.838791][T18536] ? page_to_nid.part.0+0x20/0x20 [ 475.843797][T18536] ? ___might_sleep+0x163/0x280 [ 475.848629][T18536] __should_failslab+0x121/0x190 [ 475.853551][T18536] should_failslab+0x9/0x14 [ 475.858033][T18536] kmem_cache_alloc+0x2aa/0x710 [ 475.862874][T18536] ? kernfs_activate+0x34/0x1f0 [ 475.867824][T18536] ? __mutex_lock+0x45d/0x13c0 [ 475.872630][T18536] __kernfs_new_node+0xf0/0x6c0 [ 475.877477][T18536] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 475.882914][T18536] ? wait_for_completion+0x440/0x440 [ 475.888193][T18536] ? sysfs_do_create_link_sd.isra.0+0x82/0x130 [ 475.894346][T18536] ? __kasan_check_read+0x11/0x20 [ 475.899379][T18536] ? __kasan_check_write+0x14/0x20 [ 475.904473][T18536] kernfs_new_node+0x96/0x120 [ 475.909131][T18536] kernfs_create_link+0xd7/0x250 [ 475.914054][T18536] sysfs_do_create_link_sd.isra.0+0x90/0x130 [ 475.920016][T18536] sysfs_create_link+0x65/0xc0 [ 475.924880][T18536] driver_sysfs_add+0x170/0x280 [ 475.929716][T18536] device_bind_driver+0x19/0xd0 [ 475.934552][T18536] usb_driver_claim_interface+0x249/0x430 [ 475.940253][T18536] claimintf+0x11b/0x1d0 [ 475.944481][T18536] checkintf.cold+0x89/0x98 [ 475.948966][T18536] check_ctrlrecip+0x162/0x2a0 [ 475.953712][T18536] proc_control+0xe1/0x720 [ 475.958121][T18536] ? __kasan_check_write+0x14/0x20 [ 475.963216][T18536] ? check_ctrlrecip+0x2a0/0x2a0 [ 475.968221][T18536] ? rwlock_bug.part.0+0x90/0x90 [ 475.973151][T18536] usbdev_do_ioctl+0x1b5a/0x2d10 [ 475.978086][T18536] ? proc_do_submiturb+0x3520/0x3520 [ 475.983352][T18536] ? trace_hardirqs_on+0x67/0x240 [ 475.988362][T18536] ? tomoyo_path_number_perm+0x459/0x520 [ 475.993983][T18536] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 476.000325][T18536] ? tomoyo_path_number_perm+0x263/0x520 [ 476.006040][T18536] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 476.011828][T18536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 476.018075][T18536] ? ___might_sleep+0x163/0x280 [ 476.022909][T18536] ? usbdev_compat_ioctl+0x30/0x30 [ 476.028020][T18536] usbdev_ioctl+0x26/0x30 [ 476.032333][T18536] do_vfs_ioctl+0xdb6/0x13e0 [ 476.036905][T18536] ? ioctl_preallocate+0x210/0x210 [ 476.041999][T18536] ? selinux_file_mprotect+0x620/0x620 [ 476.047448][T18536] ? __fget+0x384/0x560 [ 476.051709][T18536] ? ksys_dup3+0x3e0/0x3e0 [ 476.056108][T18536] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 476.062442][T18536] ? fput_many+0x12c/0x1a0 [ 476.066843][T18536] ? tomoyo_file_ioctl+0x23/0x30 [ 476.071774][T18536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 476.077993][T18536] ? security_file_ioctl+0x8d/0xc0 [ 476.083086][T18536] ksys_ioctl+0xab/0xd0 [ 476.087226][T18536] __x64_sys_ioctl+0x73/0xb0 [ 476.091799][T18536] do_syscall_64+0xfd/0x6a0 [ 476.096286][T18536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 476.102156][T18536] RIP: 0033:0x4598e9 [ 476.106044][T18536] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 476.125632][T18536] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.134050][T18536] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 [ 476.142005][T18536] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 476.149964][T18536] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 476.157918][T18536] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 [ 476.165870][T18536] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 [ 476.204477][T18540] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6000000000000000, 0x7ff0bdbe}) 15:36:00 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x1000000, 0x0, 0x7ff0bdbe}) 15:36:00 executing program 3 (fault-call:1 fault-nth:6): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = semget(0x3, 0x1, 0x1) r2 = socket(0x10, 0x1, 0x6ea) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = getegid() r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r5, 0x138) fsetxattr$system_posix_acl(r5, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="63cc341400000000000076480000000000000002000000f32acdbadb614b4039d581fe6bfbc3cb2f22fbd3aae0a793b4a402000000709ad5b5385fb2f04783e90278f3192f79009f316cb90d21c93f", @ANYRES32=0x0, @ANYBLOB="04000100b215510d86338bb035191b4e7438a1658118426f5f8968f1e050ca772fc813796a87fd2aef733f974f1bc9d0352d9c2fb9abcde19106f553aecb39", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x1) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) r8 = getegid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000000c0)={{0x80000000, r3, r4, r7, r8, 0x10, 0x4}, 0x7fff, 0xffffffffffffffff, 0x5}) clock_nanosleep(0x2, 0xfffffffffdfffffe, &(0x7f0000051ff0), 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r9, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000001100)=0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x21000000000012, 0x2, @tid=r10}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r11 = gettid() mmap(&(0x7f00001e6000/0x1000)=nil, 0x1000, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) tkill(r11, 0x1000000000016) r12 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r12) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01e70080", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r12, 0x84, 0x7a, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r14, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000000)=0x84) 15:36:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 477.793747][T18561] usb usb2: usbfs: process 18561 (syz-executor.3) did not claim interface 0 before use [ 477.803815][T18561] FAULT_INJECTION: forcing a failure. [ 477.803815][T18561] name failslab, interval 1, probability 0, space 0, times 0 [ 477.826591][T18561] CPU: 1 PID: 18561 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 477.834090][T18561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.844161][T18561] Call Trace: [ 477.847469][T18561] dump_stack+0x172/0x1f0 [ 477.851830][T18561] should_fail.cold+0xa/0x15 [ 477.856435][T18561] ? fault_create_debugfs_attr+0x180/0x180 [ 477.862282][T18561] ? page_to_nid.part.0+0x20/0x20 [ 477.867327][T18561] ? ___might_sleep+0x163/0x280 [ 477.872198][T18561] __should_failslab+0x121/0x190 [ 477.877189][T18561] should_failslab+0x9/0x14 [ 477.881705][T18561] kmem_cache_alloc_trace+0x2d3/0x790 [ 477.887097][T18561] ? __kasan_check_write+0x14/0x20 [ 477.892244][T18561] ? up_read+0x159/0x570 [ 477.896503][T18561] kobject_uevent_env+0x387/0x101d [ 477.901623][T18561] ? notifier_call_chain+0x1e0/0x230 [ 477.906933][T18561] kobject_uevent+0x20/0x26 [ 477.911451][T18561] driver_bound+0x19b/0x1f0 [ 477.915969][T18561] device_bind_driver+0xaf/0xd0 [ 477.920853][T18561] usb_driver_claim_interface+0x249/0x430 [ 477.926588][T18561] claimintf+0x11b/0x1d0 [ 477.930853][T18561] checkintf.cold+0x89/0x98 [ 477.935466][T18561] check_ctrlrecip+0x162/0x2a0 [ 477.940247][T18561] proc_control+0xe1/0x720 [ 477.944680][T18561] ? __kasan_check_write+0x14/0x20 [ 477.949805][T18561] ? check_ctrlrecip+0x2a0/0x2a0 [ 477.954751][T18561] ? rwlock_bug.part.0+0x90/0x90 [ 477.959710][T18561] usbdev_do_ioctl+0x1b5a/0x2d10 [ 477.964662][T18561] ? proc_do_submiturb+0x3520/0x3520 [ 477.970049][T18561] ? trace_hardirqs_on+0x67/0x240 [ 477.975086][T18561] ? tomoyo_path_number_perm+0x459/0x520 [ 477.980733][T18561] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 477.986985][T18561] ? tomoyo_path_number_perm+0x263/0x520 [ 477.992636][T18561] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 477.998461][T18561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.004719][T18561] ? ___might_sleep+0x163/0x280 [ 478.009673][T18561] ? usbdev_compat_ioctl+0x30/0x30 [ 478.014805][T18561] usbdev_ioctl+0x26/0x30 [ 478.019145][T18561] do_vfs_ioctl+0xdb6/0x13e0 [ 478.023750][T18561] ? ioctl_preallocate+0x210/0x210 [ 478.028888][T18561] ? selinux_file_mprotect+0x620/0x620 [ 478.034368][T18561] ? __fget+0x384/0x560 [ 478.038537][T18561] ? ksys_dup3+0x3e0/0x3e0 [ 478.042966][T18561] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 478.049224][T18561] ? fput_many+0x12c/0x1a0 [ 478.053659][T18561] ? tomoyo_file_ioctl+0x23/0x30 [ 478.058609][T18561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.064865][T18561] ? security_file_ioctl+0x8d/0xc0 [ 478.070098][T18561] ksys_ioctl+0xab/0xd0 [ 478.074380][T18561] __x64_sys_ioctl+0x73/0xb0 [ 478.078985][T18561] do_syscall_64+0xfd/0x6a0 [ 478.083514][T18561] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 478.089416][T18561] RIP: 0033:0x4598e9 [ 478.093323][T18561] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.113057][T18561] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.121493][T18561] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 [ 478.129474][T18561] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 478.137455][T18561] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:36:01 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6800000000000000, 0x7ff0bdbe}) [ 478.145441][T18561] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 [ 478.153423][T18561] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 [ 478.163981][T18561] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:01 executing program 3 (fault-call:1 fault-nth:7): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:01 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x2000000, 0x0, 0x7ff0bdbe}) [ 478.252158][T18567] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 478.324219][T18577] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 478.349239][T18576] usb usb2: usbfs: process 18576 (syz-executor.3) did not claim interface 0 before use [ 478.380335][T18576] FAULT_INJECTION: forcing a failure. [ 478.380335][T18576] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 478.393757][T18576] CPU: 1 PID: 18576 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 478.401313][T18576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.401318][T18576] Call Trace: [ 478.401341][T18576] dump_stack+0x172/0x1f0 [ 478.401359][T18576] should_fail.cold+0xa/0x15 [ 478.401376][T18576] ? fault_create_debugfs_attr+0x180/0x180 [ 478.401400][T18576] should_fail_alloc_page+0x50/0x60 [ 478.434916][T18576] __alloc_pages_nodemask+0x1a1/0x900 [ 478.440306][T18576] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 478.446644][T18576] ? __alloc_pages_slowpath+0x2520/0x2520 [ 478.452461][T18576] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 478.458278][T18576] ? __kasan_check_read+0x11/0x20 [ 478.463325][T18576] ? fault_create_debugfs_attr+0x180/0x180 [ 478.469142][T18576] cache_grow_begin+0x90/0xd20 [ 478.473930][T18576] ? kobject_uevent_env+0x387/0x101d [ 478.479316][T18576] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 478.485565][T18576] kmem_cache_alloc_trace+0x6b3/0x790 [ 478.490953][T18576] kobject_uevent_env+0x387/0x101d [ 478.496422][T18576] ? notifier_call_chain+0x1e0/0x230 [ 478.501723][T18576] kobject_uevent+0x20/0x26 [ 478.506233][T18576] driver_bound+0x19b/0x1f0 [ 478.510744][T18576] device_bind_driver+0xaf/0xd0 [ 478.515611][T18576] usb_driver_claim_interface+0x249/0x430 [ 478.521469][T18576] claimintf+0x11b/0x1d0 [ 478.525731][T18576] checkintf.cold+0x89/0x98 [ 478.530254][T18576] check_ctrlrecip+0x162/0x2a0 [ 478.535035][T18576] proc_control+0xe1/0x720 [ 478.539461][T18576] ? __kasan_check_write+0x14/0x20 [ 478.544588][T18576] ? check_ctrlrecip+0x2a0/0x2a0 [ 478.549532][T18576] ? rwlock_bug.part.0+0x90/0x90 [ 478.554512][T18576] usbdev_do_ioctl+0x1b5a/0x2d10 [ 478.559499][T18576] ? proc_do_submiturb+0x3520/0x3520 [ 478.564796][T18576] ? trace_hardirqs_on+0x67/0x240 [ 478.569837][T18576] ? tomoyo_path_number_perm+0x459/0x520 [ 478.575575][T18576] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 478.581827][T18576] ? tomoyo_path_number_perm+0x263/0x520 [ 478.587491][T18576] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 478.593659][T18576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.593678][T18576] ? ___might_sleep+0x163/0x280 [ 478.593693][T18576] ? usbdev_compat_ioctl+0x30/0x30 [ 478.593711][T18576] usbdev_ioctl+0x26/0x30 [ 478.614307][T18576] do_vfs_ioctl+0xdb6/0x13e0 [ 478.618915][T18576] ? ioctl_preallocate+0x210/0x210 [ 478.624055][T18576] ? selinux_file_mprotect+0x620/0x620 [ 478.629532][T18576] ? __fget+0x384/0x560 [ 478.629548][T18576] ? ksys_dup3+0x3e0/0x3e0 [ 478.629568][T18576] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 478.644362][T18576] ? fput_many+0x12c/0x1a0 [ 478.648995][T18576] ? tomoyo_file_ioctl+0x23/0x30 [ 478.653947][T18576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.660812][T18576] ? security_file_ioctl+0x8d/0xc0 [ 478.665959][T18576] ksys_ioctl+0xab/0xd0 [ 478.670130][T18576] __x64_sys_ioctl+0x73/0xb0 [ 478.674733][T18576] do_syscall_64+0xfd/0x6a0 [ 478.680205][T18576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 478.686102][T18576] RIP: 0033:0x4598e9 [ 478.690001][T18576] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.710547][T18576] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.718955][T18576] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 15:36:01 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x3000000, 0x0, 0x7ff0bdbe}) 15:36:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x202101, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f00000000c0)=0x7ff) tkill(r1, 0x1000000000016) [ 478.726922][T18576] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 478.734886][T18576] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 478.742844][T18576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 [ 478.750798][T18576] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 15:36:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x401, 0x5, 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) [ 479.107630][T18594] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) close(r0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000080)="93702503ba6d0ef0295e20406d7808eadbdb45e53ce467f35716b46ae6a0c1482b43aa9c63c6bb3a19738de736a240ffc1264a6e45b8bd7190824f0679afe0706538173c464202a4e7c39bc196a6481b6d0bf1d0dd5253dd5276b177f89fb8d0926a5486425c00c8ba5e283c757bec05f8e853d8b83430b350120f98a6f8036c972b9a31f7d092a5452c722a50eac2c8a4e8ae205cd510fc32d511752e401f30364e16baa19bbd12a04d3e819742eeb30aed56c61bfbbc8700eb552ad6d36a2fd2b7ea7dab77357332a3f21e78460a9d913fc4763d12244519f6de6d995d76", &(0x7f0000000000)="07cf5a1c61bf9f354b6f36e873cb41c2837d65319bf2f1445a9351c13a9b6c213a6ed19d918a03b626e259c789ee1d3f4abf3b135945716429c098f9a54e6e"}}, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x0) 15:36:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x7ff0bdbe}) [ 479.153857][T18576] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x7ff0bdbe}) 15:36:02 executing program 3 (fault-call:1 fault-nth:8): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x5000000, 0x0, 0x7ff0bdbe}) [ 479.335959][T18609] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 479.346299][T18610] usb usb2: usbfs: process 18610 (syz-executor.3) did not claim interface 0 before use [ 479.376524][T18610] FAULT_INJECTION: forcing a failure. [ 479.376524][T18610] name failslab, interval 1, probability 0, space 0, times 0 [ 479.401435][T18610] CPU: 0 PID: 18610 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 479.409053][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.419208][T18610] Call Trace: [ 479.422513][T18610] dump_stack+0x172/0x1f0 [ 479.426862][T18610] should_fail.cold+0xa/0x15 [ 479.431470][T18610] ? fault_create_debugfs_attr+0x180/0x180 [ 479.437294][T18610] ? page_to_nid.part.0+0x20/0x20 [ 479.442333][T18610] ? ___might_sleep+0x163/0x280 [ 479.447203][T18610] __should_failslab+0x121/0x190 [ 479.452182][T18610] should_failslab+0x9/0x14 [ 479.456710][T18610] __kmalloc+0x2e0/0x770 [ 479.461064][T18610] ? kasan_kmalloc+0x9/0x10 [ 479.465596][T18610] ? kobject_get_path+0xc4/0x1b0 [ 479.470639][T18610] kobject_get_path+0xc4/0x1b0 [ 479.475451][T18610] kobject_uevent_env+0x3ab/0x101d [ 479.480576][T18610] ? notifier_call_chain+0x1e0/0x230 [ 479.486126][T18610] kobject_uevent+0x20/0x26 [ 479.490650][T18610] driver_bound+0x19b/0x1f0 [ 479.495177][T18610] device_bind_driver+0xaf/0xd0 [ 479.500045][T18610] usb_driver_claim_interface+0x249/0x430 [ 479.505779][T18610] claimintf+0x11b/0x1d0 [ 479.510129][T18610] checkintf.cold+0x89/0x98 [ 479.514655][T18610] check_ctrlrecip+0x162/0x2a0 [ 479.519436][T18610] proc_control+0xe1/0x720 [ 479.524056][T18610] ? __kasan_check_write+0x14/0x20 [ 479.529203][T18610] ? check_ctrlrecip+0x2a0/0x2a0 [ 479.534154][T18610] ? rwlock_bug.part.0+0x90/0x90 [ 479.539124][T18610] usbdev_do_ioctl+0x1b5a/0x2d10 [ 479.544080][T18610] ? proc_do_submiturb+0x3520/0x3520 [ 479.549383][T18610] ? trace_hardirqs_on+0x67/0x240 [ 479.554427][T18610] ? tomoyo_path_number_perm+0x459/0x520 [ 479.560079][T18610] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 479.566454][T18610] ? tomoyo_path_number_perm+0x263/0x520 [ 479.572160][T18610] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 479.577983][T18610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.584242][T18610] ? ___might_sleep+0x163/0x280 [ 479.589142][T18610] ? usbdev_compat_ioctl+0x30/0x30 [ 479.594276][T18610] usbdev_ioctl+0x26/0x30 [ 479.598818][T18610] do_vfs_ioctl+0xdb6/0x13e0 [ 479.603427][T18610] ? ioctl_preallocate+0x210/0x210 [ 479.608557][T18610] ? selinux_file_mprotect+0x620/0x620 [ 479.614028][T18610] ? __fget+0x384/0x560 [ 479.618300][T18610] ? ksys_dup3+0x3e0/0x3e0 [ 479.622852][T18610] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 479.629112][T18610] ? fput_many+0x12c/0x1a0 [ 479.633568][T18610] ? tomoyo_file_ioctl+0x23/0x30 [ 479.638522][T18610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.644780][T18610] ? security_file_ioctl+0x8d/0xc0 [ 479.649910][T18610] ksys_ioctl+0xab/0xd0 [ 479.654088][T18610] __x64_sys_ioctl+0x73/0xb0 [ 479.658780][T18610] do_syscall_64+0xfd/0x6a0 [ 479.663300][T18610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.669231][T18610] RIP: 0033:0x4598e9 [ 479.673222][T18610] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 479.692837][T18610] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.701359][T18610] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 [ 479.709372][T18610] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 479.717960][T18610] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:36:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x7400000000000000, 0x7ff0bdbe}) [ 479.725941][T18610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 [ 479.733923][T18610] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 [ 479.763763][T18610] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x6000000, 0x0, 0x7ff0bdbe}) 15:36:02 executing program 3 (fault-call:1 fault-nth:9): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 479.836009][T18619] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x7ff0bdbe}) 15:36:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x7000000, 0x0, 0x7ff0bdbe}) [ 479.940550][T18625] usb usb2: usbfs: process 18625 (syz-executor.3) did not claim interface 0 before use [ 480.008701][T18625] FAULT_INJECTION: forcing a failure. [ 480.008701][T18625] name failslab, interval 1, probability 0, space 0, times 0 [ 480.033171][T18625] CPU: 1 PID: 18625 Comm: syz-executor.3 Not tainted 5.3.0 #0 [ 480.040870][T18625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.050934][T18625] Call Trace: [ 480.054246][T18625] dump_stack+0x172/0x1f0 [ 480.058600][T18625] should_fail.cold+0xa/0x15 [ 480.063740][T18625] ? fault_create_debugfs_attr+0x180/0x180 [ 480.069596][T18625] ? page_to_nid.part.0+0x20/0x20 [ 480.074643][T18625] ? ___might_sleep+0x163/0x280 [ 480.079516][T18625] __should_failslab+0x121/0x190 [ 480.084478][T18625] should_failslab+0x9/0x14 [ 480.089007][T18625] kmem_cache_alloc_node_trace+0x274/0x750 [ 480.094913][T18625] ? kasan_unpoison_shadow+0x35/0x50 [ 480.100224][T18625] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 480.106135][T18625] __kmalloc_node_track_caller+0x3d/0x70 [ 480.111972][T18625] __kmalloc_reserve.isra.0+0x40/0xf0 [ 480.117363][T18625] __alloc_skb+0x10b/0x5e0 [ 480.121796][T18625] ? netdev_alloc_frag+0x1b0/0x1b0 [ 480.126923][T18625] ? netlink_has_listeners+0x6e/0x3f0 [ 480.132317][T18625] alloc_uevent_skb+0x83/0x1e2 [ 480.137104][T18625] kobject_uevent_env+0xaa3/0x101d [ 480.142225][T18625] ? notifier_call_chain+0x1e0/0x230 [ 480.147551][T18625] kobject_uevent+0x20/0x26 [ 480.152068][T18625] driver_bound+0x19b/0x1f0 [ 480.156603][T18625] device_bind_driver+0xaf/0xd0 [ 480.161469][T18625] usb_driver_claim_interface+0x249/0x430 [ 480.167207][T18625] claimintf+0x11b/0x1d0 [ 480.171644][T18625] checkintf.cold+0x89/0x98 [ 480.176166][T18625] check_ctrlrecip+0x162/0x2a0 [ 480.181124][T18625] proc_control+0xe1/0x720 [ 480.185559][T18625] ? __kasan_check_write+0x14/0x20 [ 480.190695][T18625] ? check_ctrlrecip+0x2a0/0x2a0 [ 480.195643][T18625] ? rwlock_bug.part.0+0x90/0x90 [ 480.200697][T18625] usbdev_do_ioctl+0x1b5a/0x2d10 [ 480.205656][T18625] ? proc_do_submiturb+0x3520/0x3520 [ 480.210953][T18625] ? trace_hardirqs_on+0x67/0x240 [ 480.215994][T18625] ? tomoyo_path_number_perm+0x459/0x520 [ 480.221647][T18625] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 480.227909][T18625] ? tomoyo_path_number_perm+0x263/0x520 [ 480.233656][T18625] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 480.239476][T18625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 480.245767][T18625] ? ___might_sleep+0x163/0x280 [ 480.250637][T18625] ? usbdev_compat_ioctl+0x30/0x30 [ 480.255764][T18625] usbdev_ioctl+0x26/0x30 [ 480.260113][T18625] do_vfs_ioctl+0xdb6/0x13e0 [ 480.264730][T18625] ? ioctl_preallocate+0x210/0x210 [ 480.269860][T18625] ? selinux_file_mprotect+0x620/0x620 [ 480.275358][T18625] ? __fget+0x384/0x560 [ 480.279708][T18625] ? ksys_dup3+0x3e0/0x3e0 [ 480.284170][T18625] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 480.290436][T18625] ? fput_many+0x12c/0x1a0 [ 480.294867][T18625] ? tomoyo_file_ioctl+0x23/0x30 [ 480.299819][T18625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 480.306072][T18625] ? security_file_ioctl+0x8d/0xc0 [ 480.311201][T18625] ksys_ioctl+0xab/0xd0 [ 480.315380][T18625] __x64_sys_ioctl+0x73/0xb0 [ 480.320079][T18625] do_syscall_64+0xfd/0x6a0 [ 480.324597][T18625] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.330500][T18625] RIP: 0033:0x4598e9 [ 480.334402][T18625] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 480.354006][T18625] RSP: 002b:00007fec59332c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.362422][T18625] RAX: ffffffffffffffda RBX: 00007fec59332c90 RCX: 00000000004598e9 [ 480.370403][T18625] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 480.378381][T18625] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 480.386358][T18625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec593336d4 [ 480.394341][T18625] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 [ 480.418649][T18625] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x8000000, 0x0, 0x7ff0bdbe}) 15:36:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xff00000000000000, 0x7ff0bdbe}) 15:36:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x1f, 0x4) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000100)='./file0\x00') tkill(r2, 0x1000000000016) 15:36:03 executing program 3 (fault-call:1 fault-nth:10): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 480.545121][T18645] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 480.562892][T18639] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x40000000, 0x0, 0x7ff0bdbe}) 15:36:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x7ff0bdbe}) 15:36:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xa1000000, 0x0, 0x7ff0bdbe}) [ 480.746128][T18658] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xff000000, 0x0, 0x7ff0bdbe}) 15:36:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 480.939084][T18672] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xff600000, 0x0, 0x7ff0bdbe}) [ 481.010079][T18673] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/180) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 15:36:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x400000000000, 0x0, 0x7ff0bdbe}) [ 481.117767][T18681] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x555555953000, 0x0, 0x7ff0bdbe}) 15:36:04 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() ptrace$setopts(0x4200, r1, 0x9, 0x100000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x23) 15:36:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x555555975000, 0x0, 0x7ff0bdbe}) [ 481.271707][T18694] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:04 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x100000, r1}) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=""/223, &(0x7f0000000040)=[{0x2, 0xfc, 0x7, &(0x7f00000001c0)=""/252}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:36:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x60ffffffffff, 0x0, 0x7ff0bdbe}) 15:36:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8000, 0x0) tkill(r1, 0x1000000000016) 15:36:04 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000db8, 0x80000) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40000) write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0xa00000000000, 0x8, 0x7ff, 0x0, 0xfffffffffffffffe, 0xa88, 0x7, 0x10000, 0xfffffffffffffeff}}, 0x43) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xea4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x2, 0x3}, &(0x7f0000000200)=0x8) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) sched_setparam(r3, &(0x7f0000000240)=0x7fffffff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x760000000000, 0x0, 0x7ff0bdbe}) [ 481.714855][T18715] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:04 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x321a00, 0x0) r4 = signalfd(r0, &(0x7f0000000240)={0x8}, 0x8) ioctl$FICLONE(r3, 0x40049409, r4) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0x81, 0x4) 15:36:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x7fffffffefff, 0x0, 0x7ff0bdbe}) [ 481.856660][T18730] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 481.887765][T18736] usb usb2: usbfs: process 18736 (syz-executor.3) did not claim interface 0 before use 15:36:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x960000000000, 0x0, 0x7ff0bdbe}) [ 481.922923][T18736] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 481.933889][T18737] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 482.053437][T18750] usb usb2: usbfs: process 18750 (syz-executor.3) did not claim interface 0 before use [ 482.076715][T18750] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 482.083780][T18749] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:05 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x30955555550000, 0x0, 0x7ff0bdbe}) [ 482.597429][T18759] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 482.666335][T18760] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xec, 0x200003) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)={0x657f, 0xdbc50e8707e0da0}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 15:36:07 executing program 3: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x2008000000c0040) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000200), &(0x7f0000000140)=0xfffffffffffffd48) 15:36:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$void(0xffffffffffffffff, 0x5450) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0xfffffffffffffec9) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="0218f918d769151dcd7d78c6d2b5f698", 0x10) clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f00000005c0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000100)=r4) tkill(r2, 0x1000000000016) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x100000000, 0x6}, &(0x7f0000000300)=0x8) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000e601353d7dee5a0e10e36f87f954f276f3644215945e2755f50a0b8404e02e5e5a6449ba46d66724d8", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x591800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000ac0)={0x0, 0x7fff, 0x38}, &(0x7f0000000780)=0xffffff99) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f00000007c0)={r12, 0x20}, 0x8) ioctl$BLKROTATIONAL(r11, 0x127e, &(0x7f0000000180)) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f00000008c0)={r12, 0x8, 0x30}, &(0x7f0000000900)=0xc) ioctl$DRM_IOCTL_RES_CTX(r11, 0xc0106426, &(0x7f0000000200)={0x7, &(0x7f0000000140)=[{0x0}, {}, {}, {}, {}, {}, {}]}) r14 = socket(0x1e, 0x805, 0x0) connect(r14, &(0x7f0000000080)=@x25={0x9, @remote={[], 0x3}}, 0x80) r15 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r15, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f0000000b80)={0x1, [0x0]}, &(0x7f00000003c0)=0x24a) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r16, 0x3a8e}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000600)={r17, 0x6, 0x140a09e5, 0x3, 0x9961, 0x3}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000580)={r18, 0x100}, 0xffffffffffffffe9) ioctl$DRM_IOCTL_GET_SAREA_CTX(r11, 0xc010641d, &(0x7f0000000300)={r13, &(0x7f0000000480)=""/112}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000540)={r13, &(0x7f0000000500)=""/52}) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x7a, &(0x7f00000000c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r10, 0x321}, &(0x7f0000000380)=0xc) sendmsg$inet_sctp(r5, &(0x7f0000000740)={&(0x7f0000000140)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="45c99079c3da24ce50c055ceed79801e0bd6b6e588f236b2a1e59b73174574dee574bffd788e7d207b0b3c2123313f0d59a604cce31b", 0xeeb413af45423f53}, {&(0x7f00000001c0)="14ff8354e2f281b26cc202b8c60c13f0a57416f7da82ea05cbaa3a10ecd97217be379982717e2d376334171b31462b8c153dc8edf53af977efa9efa0161a4d6662f49262454094ac95aebd16f7082c7cf67c4d76dc3afe3d0ebb8c004cef82", 0xfffffdda}, {&(0x7f0000000240)}], 0x3, &(0x7f0000000640)=[@sndrcv={0x0, 0x84, 0x1, {0xfff, 0x8, 0x8, 0xec, 0x6, 0x3, 0x0, 0xff, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @sndinfo={0x20, 0x84, 0x2, {0x1d, 0x10000, 0x8, 0x7, r7}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0x7ff}}, @sndrcv={0x30, 0x84, 0x1, {0xe17, 0x6, 0x0, 0x6, 0x40, 0x80000000, 0x500000000000, 0x2, r19}}], 0xd0, 0x80}, 0x4940) 15:36:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:07 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x50975555550000, 0x0, 0x7ff0bdbe}) 15:36:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:07 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:07 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x70710000000000, 0x0, 0x7ff0bdbe}) [ 484.759983][T18772] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 484.849639][T18779] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:07 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xe0700000000000, 0x0, 0x7ff0bdbe}) 15:36:07 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') lseek(r0, 0xfffffffffffffefd, 0x0) 15:36:07 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xf868, 0x4, 0x9, 0x0, 0x0, 0x7ff0bdbe}) [ 484.939138][T18792] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:07 executing program 2: unshare(0x400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x202700, 0x0) fcntl$notify(r0, 0x402, 0x0) 15:36:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 485.029315][T18802] vhci_hcd: default hub control req: 68f8 v0000 i0004 l0 [ 485.121041][T18810] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:08 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) clock_getres(0x5, &(0x7f0000000000)) tkill(r0, 0x1000000000016) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) 15:36:08 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/qsb/00#/00#\x00', 0x44, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00\xb5\xe2\n\xe4\xbe[\bV\xd6\x80\x8a\x98\xdb)8(&z\x18\xaf\xadJ\xdf\x02\v\xcd=8\xc6\\=\xce\x06DU`A\x8b\xd8}9.\x93\'\x92\xac\xb6\x15\xfeQ\xb4\x85\xbd\xdb\xd3\xb4\xd8N&\xc7\x05u\xf2\x16\x1c\x9210\x19=\xd9\xaadt\xf0\xa6\x11^ax\xc9\xcbC\x80|Xz\x8f\xde\x05\xe6{\xa8\xdf\xfe$ \xd2\x0e\x16~+?>\xd7F2\xb1_\x8e-\xa2\x12}\xd7\xea\xc2z\x14\xdc`#\xb4\xe3\x86\x1d\x11\xe7\xed\x10\xf0\xf9|\xd87(Y?\x1c\xe7\x87T\xe7\x17\x04\xc4]\xaf\x1b-$\xae\x0ff5\xbfw_N1\x1f\xfb\xdd\t\x1c>\x85\a\x12\v\xa1/p\xd1;\b\xda\xe3*[\xa5\xcf,\xceIY\xc6\x04\x9a\xfa\x8c\xcen\xf8\xf96\xe2\xd6\"@\x7f\xbe\x8b{\xa2\xdb\x96\xd8\x81\xd5\x82\\s\x95\xa6\x86\x96\x99\x9a\x93A\x04~\x14\x19Ux\xe2\x00+\xcd\xdbH\x9c\x1f\xcb}\xeb\xb9(\x12\xb4\xf9\x03=\x91\x8c\xec\xb7\xf7\xfd\xe2\x05@\x01Qq\xca\xc9\xf8x\f\x85\xf5 P\x89v\xe0M\x10\x1c<\x00\x1c\xb5\\\xaf&\a\xd9.\xfe\x19\xa80\xb1') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCCBRK(r1, 0x5428) 15:36:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xf0500000000000, 0x0, 0x7ff0bdbe}) 15:36:08 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x5, 0x0, &(0x7f0000000080)) 15:36:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x6}, @in6={0xa, 0x4e21, 0x7ff, @empty, 0x8}, @in6={0xa, 0x4e21, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb47}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x400, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x4}], 0xc8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x100000000000000, 0x0, 0x7ff0bdbe}) [ 485.618658][T18823] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:08 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x4000000000000003, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fcntl$setlease(r2, 0x400, 0x2) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) 15:36:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x200000000000000, 0x0, 0x7ff0bdbe}) 15:36:08 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) [ 485.716325][T18833] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:08 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000000)={@null, @default}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) tkill(r0, 0x1000000000017) 15:36:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x300000000000000, 0x0, 0x7ff0bdbe}) [ 485.848122][T18849] vhci_hcd: default hub control req: 0300 v0000 i0000 l0 [ 485.861249][T18850] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x400000000000000, 0x0, 0x7ff0bdbe}) [ 485.963119][T18849] vhci_hcd: default hub control req: 0300 v0000 i0000 l0 15:36:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x500000000000000, 0x0, 0x7ff0bdbe}) 15:36:08 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) [ 486.050763][T18867] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:09 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffff) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) sched_getaffinity(r1, 0x8, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:09 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x600000000000000, 0x0, 0x7ff0bdbe}) 15:36:09 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x700000000000000, 0x0, 0x7ff0bdbe}) 15:36:09 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000040)={0x8, 0x101}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 486.447711][T18880] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 486.540263][T18889] usb usb2: usbfs: process 18889 (syz-executor.3) did not claim interface 0 before use [ 486.564145][T18889] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 486.590328][T18894] usb usb2: usbfs: process 18894 (syz-executor.3) did not claim interface 0 before use [ 486.594752][T18893] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 486.614807][T18894] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:09 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x800000000000000, 0x0, 0x7ff0bdbe}) 15:36:09 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) io_setup(0x489, &(0x7f00000002c0)=0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) io_submit(r1, 0x4, &(0x7f0000000680)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0xe29, r2, &(0x7f0000000340)="2a2d2a3b0ed6", 0x6, 0x6, 0x0, 0x0, r0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f00000003c0)="f1fd21ac7b3e0a052b707d0a970b0f7d26961ad1581e4a092824f29652840ea7d08c01123a5a76e9379e6b79de9d7a7a5dbf2e3ed9df8786f91e8ce7c3b7e89020bc8386ac7a75ef0a19c472382347b05d76ab61403a947a824a1d0423c61169252c777c1c7095568996839bdf48aad37c121c40eb4884fdffba4a7b912d8228bfcf8d67f130d52d517752519f773bcd9f5bee6302f847397ced5a6cfebd0999451500a687b2081955553443b188c3125a753d5243b0289813b0182fcdcb45fc6e0adf7c4e03b016f2", 0xc9, 0x3, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000500)="f9994efcb71c572449641197be3b3ed541441ae797", 0x15, 0xb07, 0x0, 0x4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000580)="a6109de6012cd275686ffbd2510810aa2b015288b43059dbea59e2d407c41999248ff5b725b56017b84871cd366e6f78030f4667e0aa718fc8875a61b2da081693dc63f04ec9a8dfe2136bbcb6a6f608e6d7bd5d3db9b4fbeb73a585fbf8b179104645380fae9f025185da5a97d02a4b9aabff9185a62c6c7f46c8c9831a345bc41d8c79f9e27479a1998a7fbebfe5107d209019ee18a2c0ad0cd7697f30079b72fb8f24bc4b14c22433a77931e88043dfc0e0d2f4a14d9b61daa14c", 0xbc, 0x1, 0x0, 0x0, r0}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x7, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0x4, 0x8, 0x6}, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x1}}, 0x10) 15:36:09 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/34, 0x22}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x531, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x549a2e49d3d13a8}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c1de4cf258db46181577bfeaaa2e81e2b", @ANYRES16=r2, @ANYBLOB="0000fedb00000000760008000400ff0f000040008a8bca1b50f8693b07d102a3bb3f00f01fe977fad8ad942200000000"], 0x1c}}, 0x20040044) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xd4, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x1c}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000100}, 0x44410) tkill(r0, 0x1000000000016) [ 486.719429][T18904] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 486.736358][T18906] usb usb2: usbfs: process 18906 (syz-executor.3) did not claim interface 0 before use [ 486.750121][T18906] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 486.765246][T18906] usb usb2: usbfs: process 18906 (syz-executor.3) did not claim interface 0 before use [ 486.780145][T18906] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 486.824529][T18915] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:09 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:10 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x4000000000000000, 0x0, 0x7ff0bdbe}) 15:36:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:10 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x8a1, 0x3f, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x400000000000000, 0x1ff, 0x100c, 0x6, 0xe19b73d1a4919d12, 0x4, 0x1, 0x7}}) clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001140)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001180)={r3, 0x80000}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000001100)={&(0x7f00000000c0), &(0x7f0000000100)=""/4096, 0x1000}) 15:36:10 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xa100000000000000, 0x0, 0x7ff0bdbe}) [ 487.326908][T18930] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 487.336132][T18931] usb usb2: usbfs: process 18931 (syz-executor.3) did not claim interface 63 before use 15:36:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 487.381245][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 487.387075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 487.392922][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 487.398959][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 487.404810][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 487.410754][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:36:10 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xff00000000000000, 0x0, 0x7ff0bdbe}) [ 487.434247][T18937] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.451077][T18940] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:10 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xffefffffff7f0000, 0x0, 0x7ff0bdbe}) 15:36:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x15, 0x10, 0x3, 0x0, 0x144}, 0x3c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) r4 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffffffffffd, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r5, 0x0, r4, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000340)=0x4) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="98000001cd4e0000000000006100003bb70000100000001815000000", @ANYRES32=r6, @ANYBLOB="0000000000000000fdf904001000000095000000000000009510000000000000850000001400ac2458593c4e46f30000"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x8e, &(0x7f0000000600)=""/142, 0x41f00, 0x1, [], 0x0, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r8, 0xc0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x401, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x4, 0x5}, 0x0, 0x0, &(0x7f0000001140)={0x5, 0x10, 0x4, 0x7}, &(0x7f0000001180)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r7, 0x0, 0x9, &(0x7f0000001300)='cgomners\x00', r9}, 0x69d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x0, 0xe, &(0x7f00000001c0)='memory.events\x00', r9}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x15, &(0x7f0000000100)='wlan0cgroupmime_type\x00', r9}, 0x30) write$P9_RGETLOCK(r3, &(0x7f0000000180)={0x1e, 0x37, 0x1, {0x0, 0x0, 0xffffffffffffffe1, r10}}, 0x1e) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 487.629151][T18953] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 487.666447][T18955] usb usb2: usbfs: process 18955 (syz-executor.3) did not claim interface 0 before use [ 487.679740][T18955] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 487.721075][T18957] usb usb2: usbfs: process 18957 (syz-executor.3) did not claim interface 0 before use [ 487.731452][T18957] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:10 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) [ 487.941223][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 487.947060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 487.953043][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 487.958926][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:36:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:11 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xffffffff00000000, 0x0, 0x7ff0bdbe}) 15:36:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:11 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0xfffffffffffffffc, 0x8001, 0x0, 0x0, 0x7ff0bdbe}) [ 488.198463][T18970] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 488.300711][T18978] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:13 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:13 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:13 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0xffffffffff600000, 0x0, 0x7ff0bdbe}) 15:36:13 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x800) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400) 15:36:13 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) tkill(r0, 0x1000000000016) 15:36:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:13 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x2, 0x7ff0bdbe}) 15:36:13 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 490.373364][T18986] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:13 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x3, 0x7ff0bdbe}) 15:36:13 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 490.435464][T18993] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 490.471752][T19001] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:13 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x80010, r2, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000040)='.\x00', 0x2) tkill(r0, 0x1000000000016) 15:36:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000000c0)) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:13 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x4, 0x7ff0bdbe}) [ 490.578346][T19007] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 490.650584][T19014] usb usb2: usbfs: process 19014 (syz-executor.3) did not claim interface 0 before use [ 490.666298][T19014] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:14 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:14 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:14 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/205) 15:36:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x5, 0x7ff0bdbe}) [ 491.135003][T19027] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x6, 0x7ff0bdbe}) 15:36:14 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 491.184564][T19030] usb usb2: usbfs: process 19030 (syz-executor.3) did not claim interface 0 before use [ 491.222013][T19030] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:14 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x2008000001130c2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x10080, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x0, 0x4000000004000) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r2, 0x11, 0x2}, 0x14) socket$nl_route(0x10, 0x3, 0x0) accept4$rose(r2, &(0x7f0000000140)=@short={0xb, @dev, @remote, 0x1, @rose}, &(0x7f0000000180)=0x1c, 0x80800) 15:36:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x7, 0x7ff0bdbe}) [ 491.260945][T19030] usb usb2: usbfs: process 19030 (syz-executor.3) did not claim interface 0 before use [ 491.294013][T19030] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 491.334838][T19042] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 491.387187][T19043] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:14 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000e17000/0x1000)=nil, 0x1000, 0x300000e, 0x1010, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) tkill(r0, 0x1000000000016) 15:36:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x8, 0x7ff0bdbe}) 15:36:14 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x30000, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x80000000000000) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 491.554381][T19058] usb usb2: usbfs: process 19058 (syz-executor.3) did not claim interface 0 before use [ 491.564737][T19058] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:14 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:14 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xa1, 0x7ff0bdbe}) 15:36:14 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/d$\xad/mu\x83/us0#/00#\x00', 0xdb8, 0x200800000200cc2) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000040)={&(0x7f00000000c0)="4e0d49fb42373525c667f32d5033b726ada05bca92c2126f8fb07bc398068249914dad2417df8b53a645ab5672abc4d8075f096655d18c2883ea5ec20c057f78b0fe3abaf5b6f87b524e85c986d012e382007ce2ff7c54cf7b7b82513b", 0x5d}) [ 492.051628][T19070] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x300, 0x7ff0bdbe}) 15:36:15 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "297dc399571f24c2d10e5a51689ec2a0f80cdb57"}, 0x15, 0x6) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, &(0x7f0000000440)=""/243, 0x3a9, &(0x7f0000000240)={&(0x7f0000000040)={'streebog256\x00'}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x9, 0x7e00000000, 0x0, 0x2, 0x1, 0x4, 0xd523, 0x5, 0x2, 0xec5, 0xa1c, 0x800, 0x9, 0x69d02150, 0x10}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000040)='!eth0:\x00', &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x500, 0x7ff0bdbe}) [ 492.247721][T19085] usb usb2: usbfs: process 19085 (syz-executor.3) did not claim interface 0 before use [ 492.276459][T19086] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 492.290535][T19085] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 492.301769][T19089] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x600, 0x7ff0bdbe}) 15:36:15 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 492.528302][T19107] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 492.556729][T19108] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:15 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0xdc3, 0x4) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:15 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x34, 0x0, @thr={&(0x7f0000000000)="18c006135fce26f2e921f8edb270d6872b27f9c8f8af7d4dda5bfdc375a2dcbad85d48e59b07d6468115881a732ce5cf438a5ba06d04df30951db4eeb6b2f2231c27b7fe14ba1f18148c88097953b8535a48818b9d2bbdc410af89cb15db5b854764", &(0x7f00000000c0)="5259abda4fc6b32b6f6384d997b79f61b58c3f96b6c56a63879a4f6b353c239b4487df725c18c4802a3f48de9a79894502d51633db427a3c92fb14f95a03028aca45171ce0e4e830d94c37482a31f64dbfec95842f82aa0fc2a2f96388de34b053ea9589268bd52c5c4077744a68b98b17c3c55f1bba06f63e9933c27cb39a2d968eb8f44fea5054729dbd3bb3444bb7f39413dac8b4318aaefb77522c3c83e7a71b15d215b7f86243bb0876fc0f218c5f9536c4d710ae1587300986e9594d4bbb30558882ae4bde271f41235c876538d70188dec050e1aab98dd3c5129ddc475b2115ebbb73f6fb47ff526e8e13cfcd47d55f6340d9cd30"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) tkill(r0, 0x39) 15:36:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x700, 0x7ff0bdbe}) 15:36:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:15 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x4000, 0x7ff0bdbe}) [ 493.006867][T19118] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 493.023844][T19112] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 493.024596][T19122] usb usb2: usbfs: process 19122 (syz-executor.3) did not claim interface 0 before use 15:36:16 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x202000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x4, @tick=0x5, 0x1, {0x3, 0x9cd}, 0x0, 0x829b806f1c3cea1c, 0xe6}) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 15:36:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:16 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) [ 493.054207][T19122] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:16 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 493.115577][T19127] usb usb2: usbfs: process 19127 (syz-executor.3) did not claim interface 0 before use 15:36:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x60ff, 0x7ff0bdbe}) [ 493.193981][T19127] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:16 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) 15:36:16 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) [ 493.250852][T19139] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:16 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4b29004, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x8}}], [{@dont_hash='dont_hash'}, {@smackfsdef={'smackfsdef', 0x3d, 'cpuset#\xbe\x00'}}, {@permit_directio='permit_directio'}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user={'subj_user', 0x3d, 'wlan1\xbfem0'}}, {@smackfsdef={'smackfsdef', 0x3d, 'securitykeyring/'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x40002) write$apparmor_exec(r3, &(0x7f0000000040)={'exec ', 'cpuset#\xbe\x00'}, 0xe) [ 493.329224][T19140] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x7600, 0x7ff0bdbe}) [ 493.391464][T19148] usb usb2: usbfs: process 19148 (syz-executor.3) did not claim interface 0 before use [ 493.422084][T19148] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:16 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:16 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 493.504919][T19148] usb usb2: usbfs: process 19148 (syz-executor.3) did not claim interface 0 before use 15:36:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x9600, 0x7ff0bdbe}) [ 493.563228][T19148] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 493.624605][T19173] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 493.638514][T19174] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:16 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:16 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/\xcd\xe3\xf3/usb\t\x00', 0xdb8, 0x200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000000c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') 15:36:16 executing program 4: clock_nanosleep(0x6, 0x1, &(0x7f0000051ff0), 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000100000000006800000068000000080000000b0000000000000a040000000900000006000006040000000c000000040000000a0000000b4600000100000000000000010000000200000010000000040000000a000000ffffff7f10000000000000010000000030007a040a0000000000000e020000085f00a8b557625cf41add63662156276f4651c65c97ddf49446cb324fb5d3f2bb9cf439713ffabf86edc1f9ee00"/178], &(0x7f0000000180)=""/153, 0x88, 0x99, 0x1}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/203}, {&(0x7f00000004c0)=""/39}, {&(0x7f0000000500)=""/99}, {&(0x7f0000000580)=""/49}, {&(0x7f00000005c0)=""/138}, {&(0x7f0000000680)=""/111}], 0x5a, 0x3ffc) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getpeername$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000380)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000280)={0xebed, 0x8, 0x4e5, 0x100000000, 0x1, 0x7, 0x432, 0x2b, 0x9, 0x80000001, 0x6, 0x1f}) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f00000002c0)=0xffff) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000040)=0x5, 0x4) 15:36:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xa100, 0x7ff0bdbe}) 15:36:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 493.810722][T19187] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 493.839984][T19188] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:16 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xff00, 0x7ff0bdbe}) 15:36:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000092ccb94f19038e36000000de0fc30e82211b3da7759c613b5b9110000000000000950000000c000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000000c0)=0x2) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 493.957365][T19202] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 494.050251][T19206] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 494.117171][T19211] usb usb2: usbfs: process 19211 (syz-executor.3) did not claim interface 0 before use [ 494.127315][T19211] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:17 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:17 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x6, 0x0, @thr={&(0x7f0000000000)="127c3b02343c15c6a0b57c5a78aff820fcaac8c738cff2669de080bf1ec5357894a21bd8fd9647faacbc1ee78f09c28cfdcb06798228e0c3a7aca7a215502cd073cf8848de646ee3f9c10672e4dc9d61f439b6157418e0b172efda8b0b2e3c343c3fa390a9fb77516f4b8d1da78015391e11c4faf104f6", &(0x7f00000000c0)="be5edc848ccf52793e801bd0317ff3a4313f338a8a7c7ac5151e26079627ea5602ee3bcc9a638cdd5dd3a53c309d65e13d70073a23dbe64f4c9b518b4bdb5213b9433db350a5a74f04c1cee75a9ea75d82d0226e82284d3878456edc79559c9024bb09c8e26939180b7fd602ca7ee294f6117338652748d8e2241d56e1bceac688f48b74bf7068"}}, &(0x7f00000001c0)) tkill(r0, 0x1000000000016) 15:36:17 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:17 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:17 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x400000, 0x7ff0bdbe}) 15:36:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x7f, 0x2) [ 494.176815][T19215] usb usb2: usbfs: process 19215 (syz-executor.3) did not claim interface 0 before use [ 494.181261][ C1] net_ratelimit: 8 callbacks suppressed [ 494.181268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 494.192211][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 494.203719][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 494.209483][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 494.211335][T19215] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 494.320449][T19229] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 494.327630][T19224] vhci_hcd: default hub control req: 0000 v0000 i0000 l16 [ 494.348371][T19223] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:17 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:17 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 494.362370][T19228] usb usb2: usbfs: process 19228 (syz-executor.3) did not claim interface 0 before use [ 494.375964][T19228] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:17 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) mmap(&(0x7f00009b8000/0x2000)=nil, 0x2000, 0x300000f, 0x40010, 0xffffffffffffffff, 0xf) tkill(r0, 0x1000000000016) 15:36:17 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x50f000, 0x7ff0bdbe}) [ 494.412292][T19228] usb usb2: usbfs: process 19228 (syz-executor.3) did not claim interface 0 before use [ 494.422118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 494.422164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 494.501772][T19228] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 494.510135][T19238] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 15:36:17 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 494.555577][T19245] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 494.615463][T19250] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 494.678531][T19253] usb usb2: usbfs: process 19253 (syz-executor.3) did not claim interface 0 before use [ 494.691933][T19253] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 494.727484][T19253] usb usb2: usbfs: process 19253 (syz-executor.3) did not claim interface 0 before use [ 494.737715][T19253] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:18 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x707100, 0x7ff0bdbe}) 15:36:18 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:18 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="0100008780a0f704ddbf00", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7a, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x1f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r5, 0x4c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x100000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000300)=0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x4000) ioctl$CAPI_INSTALLED(r6, 0x80024322) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in=@multicast1}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x70e000, 0x7ff0bdbe}) 15:36:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 495.239127][T19265] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 495.315680][T19270] usb usb2: usbfs: process 19270 (syz-executor.3) did not claim interface 0 before use [ 495.334055][T19270] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 495.363784][T19275] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 495.416925][T19282] vhci_hcd: default hub control req: 0000 v0000 i0000 l16 15:36:18 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:18 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x717000, 0x7ff0bdbe}) 15:36:18 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) timer_create(0x4, &(0x7f0000066000)={0x0, 0x1, 0x1, @tid=r0}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x3, 0x24000) r2 = syz_open_dev$swradio(&(0x7f00000003c0)='/dev/swradio#\x00', 0x1, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x28020000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x108, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d0d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ab}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd9e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x37c3}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r4 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80000, 0x401) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) clock_gettime(0x2, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000040)) pipe(&(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000440)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000480)) tkill(r4, 0x1000000000016) [ 495.555771][T19286] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 495.602653][T19294] vhci_hcd: default hub control req: 0000 v0000 i0000 l16 [ 495.701303][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 495.707154][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 495.712981][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 495.719585][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:36:19 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x760000, 0x7ff0bdbe}) 15:36:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:19 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0xb38dc7a3c3056ce, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r3, 0x8}}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x4000) r9 = socket$inet(0x2, 0x2, 0x8) r10 = dup2(r9, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f00000002c0)={{0x0, @multicast1, 0x4e22, 0x0, 'dh\x00', 0x24, 0x1, 0x7}, {@multicast1, 0x4e20, 0x4, 0x2, 0x6, 0xf95}}, 0x44) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x7a, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) r12 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r12) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f00000003c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r12, 0x84, 0x7a, &(0x7f00000000c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) r15 = syz_open_procfs(0x0, 0x0) getsockname$packet(r15, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockname$packet(r15, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) accept$packet(r15, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_mreq(r15, 0x29, 0x0, &(0x7f0000000b80)={@local, 0x0}, &(0x7f0000000bc0)=0x14) accept$packet(r15, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r15, &(0x7f0000001040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50010903}, 0xc, &(0x7f0000001000)={&(0x7f0000001940)=ANY=[@ANYBLOB="5c030000", @ANYRES16, @ANYRES32, @ANYBLOB="2c0102006c696e6b75700000000000000000000000000000000000000000000800030006000000040004000800060000000600000000000000000000fc69736c7cabdf611136954b6364264fa861ed7ef70f41abefd830ff69caa4da6b69cb5209a3fef12cedac7ce3051c6cc088629f98aaeabab92c4a06df059673891c76407121cd91f603268c7c760277b4fbb9795dd400d2884c3f8de8b9f809af8d57b60ffd8f63fde1238454dbfce84b870c1a3ec475894e1de1233071723f209cf0d5cc6709ad660cbe3b55a1d51dca930d420f384d6620659f244e732de7", @ANYRES16=0x0, @ANYRES16, @ANYBLOB="83f18e82ec639988d00b92645499219e8bbc87902383a4d11fd26b0179da52ce97b5ccb110c0b61f3501204999c1909c37516bef9655b9cfb267c26be2e1787ea44aeba1eba05a6f35f471835249036a8e52d44004d2503748b3", @ANYBLOB="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", @ANYRES32, @ANYBLOB="3001020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000000000000000000000000000080003000600000004000400080006", @ANYRES32=r16, @ANYRES32=r17, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRES32=r18, @ANYBLOB="400002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040010) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000340)={@remote, @mcast2, @remote, 0xadb, 0x2, 0x7b8ba9bd, 0x180, 0x8001, 0x1, r16}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r11}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r20, 0x7f}, 0x8) [ 496.119636][T19306] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 496.131525][T19308] usb usb2: usbfs: process 19308 (syz-executor.3) did not claim interface 0 before use [ 496.151652][T19311] vhci_hcd: default hub control req: 0000 v0000 i0000 l16 15:36:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:19 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x960000, 0x7ff0bdbe}) [ 496.167476][T19308] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:19 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:19 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='//00#/0\x04\xf6\x00\x00\x00\x04\x00', 0xdb8, 0x487442) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 496.265255][T19316] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:19 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 496.345830][T19324] vhci_hcd: default hub control req: 0000 v0000 i0000 l16 [ 496.393296][T19327] __nla_validate_parse: 4 callbacks suppressed [ 496.393304][T19327] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 496.447607][T19331] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:21 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/d\xf2\xeb/tus&usb#/00#\x00', 0xdb8, 0x200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xe07000, 0x7ff0bdbe}) 15:36:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:21 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:21 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:21 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x7ff, 0x3, 0x800, 0x7, 0x1, 0x2}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r2 = msgget(0x1, 0x7bc) msgsnd(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000020003400c35194ea358f64be87cd633eb82258925c3801040000000000002212424660e9a348111c8e5b185bce7b"], 0x39, 0x400) 15:36:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xf05000, 0x7ff0bdbe}) [ 498.614060][T19347] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:21 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 498.661436][T19341] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:21 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x92c0f35a97a0e065, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1e1800, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) clock_gettime(0x1, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000600)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7a, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYBLOB="1e0000009d19ba9c248dc0de7626c6e64ca9f90433c6544deb1c4db11891655c91e1f9c19fa8375169370c55378486ac95cdf17c5ecb97a4481acb66ad652510496d142fdd1a1bada73a7c9df08a67edacb7f5ed05d2b3c6895f8357970d149f20d59e50f6ce4e18c48d16df"], &(0x7f00000000c0)=0x26) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x8001, 0xfffffffffffff000, 0x10000, r5}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) getresgid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) write$P9_RGETATTR(r6, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x10, {0x8b, 0x0, 0x5}, 0x8, r7, r8, 0x40, 0x20, 0x771094aa, 0x3ff, 0x1, 0xffffffffffffff49, 0x80000000, 0xff, 0x0, 0x4, 0x3, 0x3bf3, 0x189f, 0x7eac8b63, 0x1f}}, 0xa0) tkill(r0, 0x1000000000016) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r9, &(0x7f0000000100), 0x18d, 0x4000) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() r12 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, &(0x7f00000001c0)) fchmod(r12, 0x138) fsetxattr$system_posix_acl(r12, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r11}, {}]}, 0x3c, 0x1) write$FUSE_ATTR(r9, &(0x7f0000000300)={0x78, 0x0, 0x3, {0x200, 0x8, 0x0, {0x6, 0x13, 0x800, 0x401, 0x509, 0xbc5, 0xffffffff, 0x2, 0x5, 0x8, 0x7, r10, r11, 0x3}}}, 0x78) 15:36:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 498.757603][T19354] usb usb2: usbfs: process 19354 (syz-executor.3) did not claim interface 0 before use [ 498.777717][T19354] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x1000000, 0x7ff0bdbe}) [ 498.813437][T19361] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 498.838407][T19364] usb usb2: usbfs: process 19364 (syz-executor.3) did not claim interface 0 before use [ 498.854584][T19362] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:21 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 498.876894][T19364] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:21 executing program 3: socket$l2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xfff) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:21 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 498.987248][T19373] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 498.989057][T19372] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:22 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x2000000, 0x7ff0bdbe}) [ 499.075602][T19377] usb usb2: usbfs: process 19377 (syz-executor.3) did not claim interface 0 before use [ 499.121026][T19377] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 499.128199][T19381] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:22 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:22 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:22 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x3000000, 0x7ff0bdbe}) [ 499.475835][T19392] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 499.499989][T19393] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 499.861233][ C0] net_ratelimit: 4 callbacks suppressed [ 499.861240][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 499.873672][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 499.879466][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 499.885248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 499.891043][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 499.896817][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:36:24 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="efaa59b5e6c878b47fb19a2c5fe86f233c7deba78ebd4295960b703df55462abe1a1b04ef552777533006652fbab08d4d9c709897b8ea388b047d5ab50c0aada02", 0x41, 0x4004000, &(0x7f0000000180)={0x11, 0x19, r1, 0x1, 0xd9c, 0x6, @local}, 0x14) mq_timedsend(r0, &(0x7f0000000000)="5c1c6851103178df69ddf55827af1a6cb84f8cf9232ca7cc18a5ae664d0dca9bbe6ec3eeeb03e55df026038b6084c74f8a64ecfdeea4b3d37a7b06fc289dfc76e0ba8dbb00eefa262a4f3a057f0a19fabe1bf010d05606d3d0f1c19b027e99b27ead32d279b397253df2296aaa968beb0bfb07c06bcfc4f97a1ad2a805fe", 0x7e, 0x6c69, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0x80000001, 0x1}, 'port0\x00', 0x10, 0x81400, 0x3, 0x1a92, 0xffffffff, 0x40, 0x0, 0x0, 0x4, 0x9}) r2 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x12) 15:36:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x4000000, 0x7ff0bdbe}) 15:36:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_sctp(0x2, 0x2, 0x84) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7a, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r7, 0x101, 0xf30c95d60d558af}, 0xc) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x148, 0x24, 0x40b, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb5, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r8, 0xc0185500, &(0x7f0000000000)={0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7ff0bdbe}) 15:36:24 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:24 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x5000000, 0x7ff0bdbe}) 15:36:24 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 501.838488][T19414] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 501.868318][T19408] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x6000000, 0x7ff0bdbe}) 15:36:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 501.938038][T19424] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 501.945340][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 501.951111][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 501.956976][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 501.962780][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:36:24 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x7000000, 0x7ff0bdbe}) 15:36:24 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 502.086468][T19430] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 502.114481][T19436] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x8000000, 0x7ff0bdbe}) 15:36:25 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:25 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ecf0d9135ef2af5ef756cb172b3868fb036eccbd2ff04c552258025aca190c463316cd10dc2e313ad6e579e6b543e3711a45fd81eb18160812d67424fd91eea5baa950fcc8f3d96f281df1e7cf173e693435f23fa06deb77c81f192467b730e3d04a401a38c63a473ea41652b6717106ad29c306f9c45d21d3398e055f3db04707bdf15544933f3839ca136aec7418219678100334e6a7c0ca0ec853876a9da19cf66483915efaa30ff2d72a352d6de65f13b6d5043b0d6096eacf68b1f5a0cc271fe038cdae5064edc7f100c1dad1c32d2e0f949365e4a75c7a7ec34bc8070088185c30d43136cf", 0xe8) 15:36:25 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80040, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000000c0)) tkill(r0, 0x1000000000016) 15:36:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x40000000, 0x7ff0bdbe}) [ 502.751551][T19454] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 502.763281][T19455] usb usb2: usbfs: process 19455 (syz-executor.3) did not claim interface 7 before use [ 502.793028][T19453] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0b") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:25 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:25 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xa1000000, 0x7ff0bdbe}) [ 502.877303][T19455] usb usb2: usbfs: process 19455 (syz-executor.3) did not claim interface 7 before use 15:36:25 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x1ff, 0x1, 0x1, 0x1}, {0x101, 0x9, 0x1ff, 0xffffffffffffffff}, {0x0, 0x1, 0x7f, 0x1ff}, {0x0, 0x7, 0x4, 0x7fff}, {0x64ad7d74, 0x9, 0x6}]}, 0x10) 15:36:25 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1800002, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:36:26 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 503.000749][T19472] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 503.034321][T19476] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xff000000, 0x7ff0bdbe}) [ 503.128089][T19483] usb usb2: usbfs: process 19483 (syz-executor.3) did not claim interface 0 before use [ 503.163768][T19483] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 503.197176][T19490] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 503.229731][T19486] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:26 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:26 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xa0440, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa2, 0x10000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xff600000, 0x7ff0bdbe}) 15:36:26 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x400000000000, 0x7ff0bdbe}) 15:36:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47b") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 503.644535][T19503] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 503.652983][T19507] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:26 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x555555953000, 0x7ff0bdbe}) [ 503.800791][T19519] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:29 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x6) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0xa89, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = fcntl$dupfd(r0, 0x406, r3) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000100000000000000"]) 15:36:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x555555975000, 0x7ff0bdbe}) 15:36:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:29 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:29 executing program 4: clock_nanosleep(0x1, 0xfffffffffdfffffe, &(0x7f0000051ff0)={0x0, 0x989680}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x531, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x549a2e49d3d13a8}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9c1de4cf258db46181577bfeaaa2e81e2b", @ANYRES16=r2, @ANYBLOB="0000fedb00000000760008000400728000000000002c50f8693b07d102a3bb77fae5bfc11b6b6bd8ad94220000000000"], 0x1c}}, 0x20040044) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x124412}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000010}, 0x4044894) 15:36:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x60ffffffffff, 0x7ff0bdbe}) 15:36:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 506.255795][T19531] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 506.256653][T19534] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:29 executing program 3: write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x200800000004042) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x61b42, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xcace86c97b6def42}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6bc1f3c6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4110}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000480}, 0x800) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xfffffffffffffffe, 0x4000000, 0x7ff0bdbe}) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000080)) 15:36:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x760000000000, 0x7ff0bdbe}) 15:36:29 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x24301, 0x2) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="776f726b6469723d2e2f66696c65302c6d657461636f70793d6f6e2c66736d616769633d30783030303030ffffffff303030303030302c6f626a5f726f6c653d7d2475736572403a5c75736572402d76626f786e65743074727573746564252c7375626a5f747970653d2b73656c696e75782a2c7569643e", @ANYRESDEC=r2, @ANYBLOB=',euid<', @ANYRESDEC=r4, @ANYBLOB=',fowner=', @ANYRESDEC=r6, @ANYBLOB=',\x00']) r7 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r7, 0x1000000000016) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) [ 506.477378][T19550] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 506.509751][T19553] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf0") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x7fffffffefff, 0x7ff0bdbe}) 15:36:29 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1f, 0x10001) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000000c0)={[0x0, 0x4000, 0x2, 0x3000], 0x800, 0x31, 0x8}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0xc00) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 506.635984][T19565] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 506.661260][ C1] net_ratelimit: 12 callbacks suppressed [ 506.661268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 506.672809][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:36:29 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:29 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 15:36:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x960000000000, 0x7ff0bdbe}) 15:36:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 506.750701][T19568] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:29 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 506.883001][T19591] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 506.909137][T19593] usb usb2: usbfs: process 19593 (syz-executor.3) did not claim interface 0 before use 15:36:29 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x30955555550000, 0x7ff0bdbe}) 15:36:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 506.928250][T19593] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x50975555550000, 0x7ff0bdbe}) 15:36:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 507.067180][T19605] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 507.080719][T19606] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x70710000000000, 0x7ff0bdbe}) [ 507.197847][T19614] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 507.300866][T19618] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:30 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x200002) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000140)=[{r0, 0x10080}, {r1, 0x208}, {r2, 0x2000}, {r3, 0x1}], 0x4, 0x2) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f00000000c0)=0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r6, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000180)={0x80000000000, 0x2, 0x5}) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f0000000000)={0x9f, 0x0, 0x0, 0x2, 0x0, 0x7ff0bdbe}) 15:36:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:30 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x800, 0x30) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) r3 = syz_open_procfs(0x0, 0x0) getsockname$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockname$packet(r3, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) accept$packet(r3, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000b80)={@local, 0x0}, &(0x7f0000000bc0)=0x14) accept$packet(r3, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50010903}, 0xc, &(0x7f0000001000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c030000", @ANYRES16, @ANYRES32, @ANYBLOB="2c0102006c696e6b75700000000000000000000000000000000000000000000800030006000000040004000800060000000600000000000000000000fc69736c7cabdf611136954b6364264fa861ed7ef70f41abefd830ff69caa4da6b69cb5209a3fef12cedac7ce3051c6cc088629f98aaeabab92c4a06df059673891c76407121cd91f603268c7c760277b4fbb9795dd400d2884c3f8de8b9f809af8d57b60ffd8f63fde1238454dbfce84b870c1a3ec475894e1de1233071723f209cf0d5cc6709ad660cbe3b55a1d51dca930d420f384d6620659f244e732de7", @ANYRES16=0x0, @ANYRES16, @ANYBLOB="83f18e82ec639988d00b92645499219e8bbc87902383a4d11fd26b0179da52ce97b5ccb110c0b61f3501204999c1909c37516bef9655b9cfb267c26be2e1787ea44aeba1eba05a6f35f471835249036a8e52d44004d2503748b3", @ANYBLOB="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", @ANYRES32, @ANYBLOB="3001020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000090000000000000000000000080003000629b2484a48a5bdd6fa0a077ba3c4b83691ac9728824b45c7e4b62f14e1233e3db0e37927f368ec20db624c129f73ce311232", @ANYRES32=r4, @ANYRES32=r5, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRES32=r6, @ANYBLOB="400002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040010) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', r7}) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e24, 0xffffffffffffffff, 0x4e22, 0x726, 0x2, 0x80, 0xa0, 0x32, r8, r10}, {0x5, 0x401, 0xfffffffffffffc00, 0x4, 0x8, 0x6, 0x80000001, 0x5}, {0xb1, 0x7, 0x2, 0x6}, 0x4, 0x6e6bbc, 0x3, 0x1, 0x2}, {{@in=@rand_addr=0x6, 0x4d5, 0x2b}, 0x2, @in6=@mcast1, 0x3505, 0x1, 0x1, 0x4, 0x8, 0x3, 0x8001}}, 0xe8) ioctl$UI_DEV_DESTROY(r1, 0x5502) tkill(r0, 0x1000000000016) 15:36:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xe0700000000000, 0x7ff0bdbe}) 15:36:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xf0500000000000, 0x7ff0bdbe}) [ 507.760014][ T26] audit: type=1400 audit(1568648190.694:57): avc: denied { create } for pid=19627 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 [ 507.788114][T19636] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 507.827357][T19637] vhci_hcd: default hub control req: 9f00 v0000 i0000 l0 15:36:30 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x100000000000000, 0x7ff0bdbe}) 15:36:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 507.872275][T19641] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 507.902195][T19643] vhci_hcd: default hub control req: 9f00 v0000 i0000 l0 15:36:30 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000040)={{r1, r2+10000000}, {0x0, 0x9}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000, 0x0, 0x1}, {0x1}]}) fchdir(r5) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40, 0x0) pwritev(r6, &(0x7f0000000100)=[{&(0x7f00000000c0)="d6ed2d840f262ef6dd38ed1bce38778e94d1fab3b22f1fc124193328a0613788940780899c8bc5bd9aa23fead4f7260e8f55575db2e76d7ae6", 0x39}, {&(0x7f0000001140)="7a3b7636dc6843d8208188ed8aebfa7dce04efd358e09d5d2d682401301e81499fa0f7845ff8027dfe631a334ab8afe511a14bdc645758917c4f685b2383a49193e78442cf28c4aa481d2ba7f6f3bb1294828578026679f1df349db91cb6de86cb478051365ae1c452668b85d445432e98c3f60dbbc129cde838666c8562156e557f8b3fa56e1ee5d99a3570df4a5a42279f3dbb925393d603cd438fa7650cac7abde9d2db4b228c3daa0c62010d12f6c2eeb823b0a316b248307f7464b0c4bba3e14d7f4f181b295f70c2988fef01bbfbb72348dbc959228917a108df783aa6195eae40f2a309a9cf56576b9651b8cdc79c210a054fc95825ece4b1959d87835d24336f3de91215012475df761d147c37cdb808208619dbd83368c6cad2fb18282683b25a6c6c356fe56eacfe089e1bcdd14a76f63d3d30a5b4f619edb8559efb6784dbda8a6edde1695b8fcba80f287da8649daf79b8926a1dd9b809c4b09480dd38fc00b9daba9cfa9a24fec9acbe72b99e10a8ffe8fbe900948d204b2e53b56ac7ca1a969822ca59fa0c132fde156389ffd2470df312056259cea4b5c4e6cbee101436f594a8e034acea4983913bc44c890546ae96ba40fb4244e1a4e2bf465a1943549e3229ad7de342b2c28999cfc17109cb6ecb51f37c1e89ebdf2aa299197d5e8db6f89fb3c680263c1d808c0ec8c648f066fd4e253fe9978e38670fc8c4f517c6e4f3051368206e5d2f3bebcba80e786891f4f0f5ded998695ebe4f0ec7078ef54d0a2901062945feb8edca51a0b51783551f1e648ea693c532313f7d0459df7d76c7d9bb6a7191bc2da229952175143131e820c44fe4413b48078964f3de4006f251d813f30a63a304427f9970b191dd9e170822c0fbca4380134c5f6a3dfd08ab7ce65f0433de46d0303ff401462c217228147132b41e8fb8c071fce8cccffb0bb73b30310a50c260c758695167137bafe674dc7deec9a0270a5d82449ebf5f2772e921cb80178a25d37b823d67d5047d6c1b6214e969a4c730de195b011777ea54a4eb29ecfdd345215142d6d510b1208cfb6df755278c48cafa49f89aa19313f33af932a1eba4a12e29fe80e8a6bbdd973c3692dd841f21ebdecc19285d9183ba5461b87769886b19b906310fe2584e709441a30f09bd395e0629ffe0a7bb8dfeef75bcfa3de47efff9db9e0f5f2e46ceecc69f1c072f43b1004dc891b3fd4347e944392e5a5f50c43e561cfbfec720ce2a0c7cb9d5359f1c6aa51d220bfd49d386ed916df9d3e29be01daae0333b46db219a561e21979b6e2ca779dc21b79050097ecdc280c69fe13d1961857c48b49d225909e9141573f54836a14d68cc556a826e76a2ed924de67c16205447be48235ce9b559a062b97988e64a07826b9d9f37755d20fd9883dc9468182d48256afc590745f890b2972bed4052eb0c0546c86c3019e19eaa1e848e47d3fee0502acd33353c77838f8760758417c33c45ee0744b91ad48f47a8bbbba03e22f4cc5cd5aed07f416248b20db3d3848f9c9851ee245ac1c94b263ec56dcfef48d10eb8dc242e5e5488754c8ec8bdd1b6d643224ce155e60e79366a2f7ca95b40f945f2343cc81ed197b81d9fd2055dabf14cd249cf3135c1b88d23696d0b5b35a6611d6738149424332c052118e577895eaa0320978c0ce8db4f3ac5034e1d8d0d539fb01458620efec8cd284631f8a28b6f9a8db115646d8d1857f28eb8e7322b06e45d8c436941e66da59946e7541e5df33b2e83611d949f7093f86d8a2c7729f493b1116a297bb0b658f4d97d34e82954dca62c8b1295bbf17af0943fa86666bbebbaa5ea1ee382c6b47b07d2e6935d08c313efffb65301a96202e2b2ececc8bab2096a59a38379567786d416a2559ade2001c1d8bc7c14a76a034f8aa89440bd244c5b1bafe95694f1390f656991dbe501f3d556d049f829a4758d48a67871b3da5e8374336b2d9b2249fb96d2b9d27d004695f43f885902d2d7a50414400440bd668b72403f7ff2ec2a926deb03f034600cdcf50ed208b22bfefdb7f4d6b8a579f0e636a813181e003a12ccdfd18b519a89f54e87bd6d4e8c0c7f622df669ab3dc4992dcf39a32c34c298abdbf33074d96a4b1db16315c90986b6f0c7885aa4ce5cc9d97f3f2b3adfbf9fe6664e2eb9459d2fde2daa424f97960e3a02b131ddf2feff367426ab2ee6c226368d1033bc256e291c8c0c75cfad319228272e51a62b1ffca45857b5ba22ebe82db96e58655aea7fc77aa11bfc330cefed44eb7a05db7a0806d04d2fabd35844a275b49a8786907c75fc4e9474187f81e2634ae105b3352911cd54d9808a1afaa50ce3bd60bb1f189d48c2b2d557ddea39b8c6852e53ae171535a1d00c1086aa2a93b1d8552ee1c14d3c8b66beb759f981b5bd12a810843b3b4997485440f3bccf6dca19daf25b45cd45224a824e7de46e0dd9167d86d751131f1f768bed5f11dd0e1e433bf50df5ceef88c7c695a2cdf3e082544edb127fe041e48f1aea226b2e7a26325ec466e9d6c25a8e65ffe20dbd7474a1ce6a59f692ed2b721078dec707dc8e20cb6aa31463a3013e0220747a0d69b817171ab2b2935d73791b69f319e74785218dd5ae811939f8c848b3907615a4e363eb176b54a8432a5774f10c8923d56d3f57ab08051b9c8c3ea99c6897ec08dc7086422c7b9b597f1549f020516776c152a518a235df65cffe3c826dcce691d59d6f6a2578bc20c2192a5c2cf48c8f52a5a62f1487d39249493b105f1053bed46ffda28afc7136931f57f8c7be621291a2139be5db0c8442c1eccacd3c6247df7ef33975cf783972bd6ccc4913b628df5617c41ccb919b792248639363261d125e00a28180360e6f7ab3f0270fb9f6d1b6b55bb8078eb24a96bb18e8d95f0432cbac4eaa9d91e9da798fa012aeed8effc63c585fa77d4f5b7aff1cf740f4fe463a5d9003d1e49d462d73c4b92056019a2cf18265d063f7733c83a220e4e06fa229f0e99f8800586432a7085377dd64d29ca888474a82538679ef0aff478cd4064b3156ab3e794147ba246bc29f24fd3c9896f46b4807a7ce4ec37a82487995c7677dc515478d361a8921286b9a8654ea3af759e9edf25d3cbe4d364b1938770a578120381b5821c1f51d9354028508595bf68e1f00f9c0ca0738d679aa22adf4965649c4f7a8605ec24c06c4724945043f39135112183bec47154ab683cc7dae0eaac6db3101326c8532cf0dbdf7d8f6678de163cebdc1742d320ce9a9c576087ac63996f35125fa9fd7afd4b7472a1d0dbd079478e2b3335dc70c8481bcc6a47c4c13a973c79cc5e7675f2ed44e134182306b86d2c16c650cc21592ac01d855e8080301461247878d27a50d4e5f07a200ed56d3754a5ae7ca32891610eb5106a107017fd937adc596f1cdd207231bf5d2b6d56b0fe17a804adb99e6d009dc1453b349a6ffa67b21eab8b793698ffeb7543d2c462f8086ff633db19e813e6ab7d55163ae92301db4b0af59c06fefa6b66203892653b7e45f6b92862b400b6278df9d2209ba5978d514f75828e120e3ff99aff87ea45c775f9a45b9d3aa041ee374a95e8b0d33da5516a4413e43131f23543dbe4daec44b7ca89592df617ccc47f30a17ded40550e1cb25facb4cbc56191c15ac14a27893e7e769a4ec37ff27a9114633d70cb15471a02911203aa99b1dbb4069df3b0f41be0e4afac254f261714124b1ebbce030e618fcea254ba3d28e0a43c00b8ff85cde43a6107f6d5392d34e4e98f3645e25d4766a4538039eea1842f967a9fc289328c5b3e90ec7056a555263b9a74fac28a8f30e94b93dd1a30805d518190af619b8a48cd89c74d93127a73edcb44687e5b9a66c90297be511075f5e98ad30e5b797a4bbafa14c44f6f1e8b8aec79f95fe9f84d755264f3e47fb0fd3096a116228c7988f7aa0a177e84b7d5ec5400cdb770180c2b0535afeee59dace924c7e6a6f98a24def5a77ba1e77a47476d9a5cf85409a3cea946569d5283d812918d894d05819a29fa4edf9b1ed6f66daa4bd03d65633ee2e17357d0366e2259745ef489d9b86eae094edb857a9c7821c9ae06d7cc6f1dd57b8ba2ce8c9fe238780a97d555e1924e693eac2ac4c5544dab45cb5f3fbb5f27bc8c698719f9156e210d51791829b83eec6f5ca43676556a3da7099ee7a8f24e1be5dda46ec86bee98c68bb11346b08a141ba15278c1108d75f2b527ea7df4a9a27fb7c7b3115fe1151ffa16fafeb2f82a014cdebb20e61dd72e5deab4d88718eb6c46739c9a7bd23bea91a15487b1dbd252f2c529bae587a08118c8413804f23e4309f2e3d88a9a5f4c092dadb3e31613292c4b6c4aa3e7d257c9b1f2048fc0d5f4a1d71807a2d9bca90892ff1d320672b9fc7e2b4c6608ae371516ae45071ca80c5d1f94a9d68e57f003562709bedc1d81c5460781041b0a579ca9db43fc72823a80cdbace786cfcb5f2bea245c84bcb8348774dcd316025c85f95e208413f0325040dcc86202597d2cf09ddb655adfb3c7ed4182e5c42defc2298832acaca4297090e8ffa8ce35deeab158fcc48ae735b0be4c881037a9a56d99a22a31552dece48da432d0d21466578830c14ef0c9077a8d4fca80adf176af2475e6193168863effe52eab750bd99a78067000728056bb2fbd8c2c6164736ad1c3085710d6fbf7d3355771c77285ff2b4429a058eb97bd62c7d67c655eeb7ba54c8047cf5adc17a3cb162243ebae0a3432c4dcf89d5aa3400f5a3929f53a5f8f29b3c82847b669e7c2f188d0cb9c469a190373ca126bf7ad1c76a962a8f15a7837e2334c401cd70aad3b47a38d2f10e96340022f229fdec6837f215e5f749ae56c84604718222209afb25dfc2edaf1555278c223b7dd2c012d4c2f3da617810246d0c993711530cb5423a87d0a1c3760c50f1c8d4191e1c83aaf81c469164c667849da1c43a16299874aab98b75323c2f8bb4f18e917af91d9fa77aa86701c4b83e5b4cab88fa0eb2de02062bec78d41a7116a07f85d5081664b844e507b7388f39694e230dd30021b434a15eecd2e7c062e11f95191101f5f466048269ed77dd324733a80e7143993dcd48db65d8deb5438b0c96f6fa90355da7800b5d18cb581bb366aae62c1dd09b7175de79e5574d8a4d0864e77e2bb82714a03d8dc28caad995396af430a25eba5204f56698434547614947ed3e08dcf5879c4c80aca3009ab3c108e6cbd5047feadbc28f0fecad63fa5c872b8e904bd7613e8e09f2c5b39a2ea8da47dae254ccab414bca64ce373e1bd8b6b8e6991436465582383e6d51405d644b0ea9dbc742236508fc841368bd5cd97d47729d7755a60aef53d4c82e37dce3f4a39588b5a3cfcd128b260b926e940937d7f7de16e13a54d5280f0167353be0e3068ee38810f19ba2c3a2dcb85b7217b17e19c7d8a2c7bf4bb5b67d1a738843ee5361eb552301874af7e26073e21143c42fa756303148ac604658203d16d69194fae6f8f31004f83da504a9325822eb6c06a917f6936187cd0526f187d30b5a781454a1713f438bd88d8076df34df23e2e6ca5d2fc670b7e3ad10ed1b59b456f719576aca4f29c6572d23efdf4e5a3d96a32adccaa8027a2f78780287d9f67ed7fdba0acf64646de85263a455eac6dfdf89b2bcb9bf52c5d06171f84c6a72dfea7439917cc8a07f388346c4a151735f8e48fb0213b958096c52aadaebbec1ce6b9f780d98ad3578f89e6929efba6a1861d763b85d88979a2e8a9b5a68af07cb2a8ae4a", 0x1000}], 0x2, 0x0) r7 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r7, 0x1000000000016) 15:36:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:30 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000040)) dup3(r0, r0, 0xc0000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) fsetxattr$trusted_overlay_origin(r5, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) [ 507.988052][T19651] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 508.093849][T19662] usb usb2: usbfs: process 19662 (syz-executor.3) did not claim interface 0 before use [ 508.115936][T19662] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 508.164667][T19663] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 508.181242][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 508.187083][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 508.192934][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 508.198815][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 508.204788][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 508.210616][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 508.227911][T19662] usb usb2: usbfs: process 19662 (syz-executor.3) did not claim interface 0 before use [ 508.243496][T19662] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:31 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x200000000000000, 0x7ff0bdbe}) 15:36:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/ip_vs_stats\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x1b3, 0x80000) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r4, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:31 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x300000000000000, 0x7ff0bdbe}) 15:36:31 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x40) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 508.629116][T19671] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 508.677951][T19676] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 508.741232][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 508.747048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 508.810999][T19691] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 508.866168][T19692] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:33 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000040)={{r2, r3+10000000}}, 0x0) 15:36:33 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x400000000000000, 0x7ff0bdbe}) 15:36:33 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:33 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000200)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)="9068d8add7ea88bf5bbd2821dec81b549af295dd55fad194ac00bccc090af681b4cd51f304d2ece3c8f3a60efbf5bc3a4fcba774a9af837bea5286e6d9c73b40291e2ecee0b3977def88f93362e6817295f8f70f371531b83cb8d77d2572ec89a79fdfd4c35a44e64c185a560498b55da0c231e0824073cdbcd409c71df44c4036df8eda39db8d41aeff630698c3981ddbc0f867ca097b8ed4e4bf3533be1858bf4a9db1a10e8dfb06899e6e39ea91137ac8067d81f627e5c7be28cce0403053492480298395090799cf5c5a0850e24ef61c4dc266b897085d3ae6f409da787a738b5afae14306a34249098d61ed686fadcc2284", 0xf4}, {&(0x7f0000000380)="0681721e243f3fb690852b6ed014b4c501c6c457498745ec0330497218ea4e4a49446bce1e67cbf277303fee61", 0x2d}, {&(0x7f00000003c0)="621b9b2afe6c0207c5c41fe6cfe2ea775d8e86fb418d68048e504af710004919620be09f01bfdceda610956e60b1e03cd9a4b244c48d14d68a746b6d93abbd0dbe5fcf2bee40483538affca96b9ae73cfb9e1c7bb4290e8f919293310f1f8d86f29c66810a6aa890f34913308d0a0b3731bb3595e00785c6466fe05bd727a6b8997d114d1a6b6a9d82be042913ebde1d993d481287e338fb6de795b9c362876abe9b8e838acfb56c9db64c9089194a758c379e1d6e98ac6a", 0xb8}, {&(0x7f0000000480)="423864eb0fedecbd283bfc08fe09ecc7c7f66eb1f001865c5f02478a2f7eb2be4b65c0111c0fdb31ef3b254e909267f3415e1ee6d42aacd1341621ef47d17a559f816b20749e796c5f410a759efa2cb5661dd4cb31776f98d30d48a22d5560e4f8f4400c6cce66c5e2aab1230a3aad10e3fb601c4c7a860bd380b132d07e0ee943454b39a09797ccd4228ca969717c0a48c38e7d52babe1c9b34f836caea0600f0ae3d86cb05ee442b77aae549de5c3907dbbea2097044224c5bd2a6e8ba1277e21141a28826b9b568f7c788f85c3e67ef93ed595ff551558f728d58f444229d", 0xe0}, {&(0x7f0000000580)="30c46ab1989f161f98959c2f18763b04d6552693a456a17f1bf6a37c4527c965a68c248c9ba5b63130ca45cb24480c41e079e4d1acf35bf91560bd5489796904fcadf68b25ca98edd89ea946b83bcd5ce7f6e3ce04fdd07c55a2dab6e71cc4f328ed6dfa092c3c66043e3eeec8", 0x6d}, {&(0x7f0000000600)="0229d2d95f61691c82f0118686b04761db6e73c1782535fab012db218269731f6d12ee4085e922e968b38f661ce0f8af261e133fde555ac59e36", 0x3a}, {&(0x7f0000000640)="012e939682e40365eb3bed7f2099b06b6c6a0046e06d55e91a073600fc8f0aedd0d399b5e4598bea85b9dfae73992954490825d8051451e4230b37bf4df95080d893f27d7c2dd9fd79f60c9d136dc7acfa9b51fa17bec47d43d0bbc291a441cb0973d4aa2b63872c4dc825ae29272f612796c98ac8f18c15aec149100f40b6acd3", 0x81}, {&(0x7f0000000700)="d74859217cac3bf877392526fc70b3fa79f7f61fc65fc697981ec27d9c65482195ea3f9dacaed1e846853fff7b9d54c7a69271528ecc86e9f358274771350f69b5250b1877c4e9d10e6a1f31007cf24af01590019a5e711a8cdcd94e7c1ef951ddf5cf207b6dbf2a2fc4996de829853b7dee1f30c00f707afa1b82a77affde8450cbe473f4764a0d70b05768036d4e0835fb5163a7f5b18b7a4c4f16", 0x9c}, {&(0x7f00000007c0)="31be4f0529f763aa64555c7402e110df05844a1f6e9437dceae921aa0c4faa2571538c1f2464d53e073e5ce393c524cd921513faae20", 0x36}], 0x9, &(0x7f00000008c0)=[{0x70, 0x10d, 0x401, "b13c0685ad97a5327a47fa9fb01aa7b2a4f7ae6e8c8661373ce639d2fb0d13d870806732ca21b898be14d45ec390fdc21943353454b6a015bae9c912f0cb4c859153b7badcbabc9b6a0a950d8c4783dfb4cb466684759eb63b8073a9ed3a36c8"}, {0xb0, 0x100, 0x8001, "8d41c1b0cea9f5b316d98e683e425d6b2fc2c1835d9473d2d7e06652b7811ba648681b9ab968465ed3757cd43a45117c1f4bf21c003c651254b1029f6c6e28ccf14bd411b05b7a884c5f786f6e3e7077da0e5bb3ccc378a29d00d3ff5dea1ca5a580c82b5ef114bd3f77dfdd76007ef2f3c4d009917ea090794f3d8b05ffd04385926a757f2a74740906dee4c159ba50771979e5e90e85c00fbffbe4"}], 0x120}, 0x4042000) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7a, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e23, 0x6, @empty, 0x4}}}, 0x84) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x208800, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x7, 0x7]}, 0x8) 15:36:33 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 511.065628][T19706] usb usb2: usbfs: process 19706 (syz-executor.3) did not claim interface 0 before use [ 511.086636][T19702] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 511.101333][T19703] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x500000000000000, 0x7ff0bdbe}) [ 511.117300][T19706] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:34 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) tkill(r1, 0x27) tkill(r0, 0x1000000000016) 15:36:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x600000000000000, 0x7ff0bdbe}) [ 511.236884][T19719] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 511.247431][T19723] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x700000000000000, 0x7ff0bdbe}) [ 511.374459][T19733] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 511.456914][T19740] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:34 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:34 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)=0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6ad8f955, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x7) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = gettid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x11110400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5f52154a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ee}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 15:36:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x800000000000000, 0x7ff0bdbe}) 15:36:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:34 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x5ed, 0xfbc74c332bf3dc54) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) flock(r4, 0x3) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@v2={0x3, 0x1, 0xe, 0x101, 0xf, "3ba3200d1d316b67a8c3d503b4f1b9"}, 0x19, 0x0) [ 511.862310][T19711] usb usb2: usbfs: process 19711 (syz-executor.3) did not claim interface 0 before use [ 511.872472][T19711] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 511.935876][T19753] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:34 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x4000000000000000, 0x7ff0bdbe}) 15:36:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 512.021368][T19761] usb usb2: usbfs: process 19761 (syz-executor.3) did not claim interface 0 before use [ 512.028337][T19748] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 512.054165][T19761] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xa100000000000000, 0x7ff0bdbe}) 15:36:35 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) select(0x40, &(0x7f0000000000)={0x1, 0xffffffffffff75f5, 0x1ff, 0x7f, 0x9, 0x4, 0x10000, 0x2}, &(0x7f0000000040)={0x80, 0x7, 0x6, 0x9, 0xe291, 0x7, 0x100000000, 0x8}, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0xc6, 0x1000, 0x8001, 0xa4, 0xffffffff}, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000140)) 15:36:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 512.128615][T19771] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 512.215670][T19761] usb usb2: usbfs: process 19761 (syz-executor.3) did not claim interface 0 before use [ 512.271919][T19761] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 512.300274][T19785] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 512.339569][T19780] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 512.351235][ C0] net_ratelimit: 2 callbacks suppressed [ 512.351243][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 512.356875][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 512.368597][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 512.374411][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 512.380254][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 512.386060][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:36:35 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xff00000000000000, 0x7ff0bdbe}) 15:36:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:35 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x100, 0x5, 0x1}}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 15:36:35 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 15:36:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xffefffffff7f0000, 0x7ff0bdbe}) [ 512.839038][T19803] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 512.846542][T19798] usb usb2: usbfs: process 19798 (syz-executor.3) did not claim interface 0 before use [ 512.870823][T19797] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 512.891043][T19798] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 512.901258][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 512.907351][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 512.913211][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 512.919027][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 512.931075][T19798] usb usb2: usbfs: process 19798 (syz-executor.3) did not claim interface 0 before use [ 512.973070][T19811] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 512.980857][T19798] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:35 executing program 4: clock_nanosleep(0x2, 0xfffffffffdffffff, &(0x7f0000051ff0)={0x2000000000003}, 0x0) r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = getpgrp(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000002c0)=0xff3) timer_create(0x0, &(0x7f0000066000)={0x0, 0x37, 0x0, @thr={&(0x7f0000000140)="eec90d1e5ba942159fb5f4fd8551849e37763ef1864cf0272ac6e21f4642964657f0fc12f6221892769ec7842787aa63fa83132e06cde1d4d1f80f26903792c891bcbc3ee8e11d7a36fc0d001a972a9e17d9fe9ec5ce808f68919f832bd47498deadb22ba905b388ce84b8fa5c83bd09328a420a73195fa8fba987fbc4aefd8cdfae0e43ebd188b546c3d586f589f5a0d606b6f123486b03b30689dd76b16fd47aef18629b6d3257829ff3c100a4c5d7a4e948dad0219abbcb46c52205c9bb48ff9e9d1b14cd48b174af708547208026", &(0x7f0000000240)="f5eb1f9d275bc18abc1392c797cb7b578ef1dac8dac874abc5bcfb7b29fad93a3c204c6210fe84cd76e97c806c462e4d1163ff0d854f9055fb8e1a03ca2881c1c2bbab"}}, &(0x7f00009b1ffc)) r3 = syz_open_procfs(r1, &(0x7f0000000000)='net/mcfilter\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000300)={0x4, 0x2, {0xffffffffffffffff, 0x0, 0x9}}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) 15:36:36 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:36 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x80, 0x0) [ 513.059394][T19814] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xffffffff00000000, 0x7ff0bdbe}) [ 513.122894][T19822] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 513.151887][T19827] usb usb2: usbfs: process 19827 (syz-executor.3) did not claim interface 0 before use 15:36:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 513.193891][T19827] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:36 executing program 4: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x2, 0xfffffffffdfffffe, &(0x7f0000051ff0)={r0, r1+30000000}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f00000000c0)="c39e976684659ccb40de8a31de8e9cf695c48e52afca3fff928457ce985415729ee2d0071b26f193933b7d680e5287bb3859207aab60c2d2e9548a5471412b8ff2eed0514c67cacf48932c64c9bf8bc6dc2ab165ed0b7c0d5a85715aa943c0c2a35a02e9bc4d83618230b99d3b8285006f8ee3e701402a41530017a165c76b6b62fe8ce5a2733c72ee5695ac0a7c322d183176738fd17781d722b76f229dd7f031206969552c8fd4ada60447e731aa48e811219a91b2e0db62426caab7d94bf5815bb0cba21434ef6efb586dc3c6ea071c765f782f62b2ae") r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000200)={0x2f, 0x2}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x1000000000012}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000f, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r4, 0x1000000000016) 15:36:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 513.283106][T19835] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 513.302768][T19840] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0xffffffffff600000, 0x7ff0bdbe}) [ 513.435200][T19846] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 513.455687][T19853] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 513.457501][T19847] usb usb2: usbfs: process 19847 (syz-executor.3) did not claim interface 0 before use 15:36:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 513.493348][T19847] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:36 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:36 executing program 3: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) sched_getaffinity(r0, 0x8, &(0x7f0000000040)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2040, 0x0) r2 = syz_open_procfs(0x0, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) getsockname$packet(r2, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) accept$packet(r2, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000b80)={@local, 0x0}, &(0x7f0000000bc0)=0x14) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50010903}, 0xc, &(0x7f0000001000)={&(0x7f0000001940)=ANY=[@ANYBLOB="5c030000", @ANYRES16, @ANYRES32, @ANYBLOB="2c0102006c696e6b75700000000000000000000000000000000000000000000800030006000000040004000800060000000600000000000000000000fc69736c7cabdf611136954b6364264fa861ed7ef70f41abefd830ff69caa4da6b69cb5209a3fef12cedac7ce3051c6cc088629f98aaeabab92c4a06df059673891c76407121cd91f603268c7c760277b4fbb9795dd400d2884c3f8de8b9f809af8d57b60ffd8f63fde1238454dbfce84b870c1a3ec475894e1de1233071723f209cf0d5cc6709ad660cbe3b55a1d51dca930d420f384d6620659f244e732de7", @ANYRES16=0x0, @ANYRES16, @ANYBLOB="83f18e82ec639988d00b92645499219e8bbc87902383a4d11fd26b0179da52ce97b5ccb110c0b61f3501204999c1909c37516bef9655b9cfb267c26be2e1787ea44aeba1eba05a6f35f471835249036a8e52d44004d2503748b3", @ANYBLOB="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", @ANYRES32, @ANYBLOB="3001020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100656e61626c656400000000000000000000000000000000000000000000000000080003000600000004000400080006", @ANYRES32=r3, @ANYRES32=r4, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRES32=r5, @ANYBLOB="400002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040010) bind$packet(r1, &(0x7f0000000100)={0x11, 0xd218a762e0d6fea, r3, 0x1, 0x200, 0x6, @dev={[], 0x25}}, 0x14) r7 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r7, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 513.977710][T19870] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 513.996065][T19872] usb usb2: usbfs: process 19872 (syz-executor.3) did not claim interface 0 before use [ 514.026097][T19872] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 514.036385][T19866] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:37 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x2, 0x0, &(0x7f0000000080)) 15:36:37 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:37 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)=""/21, 0x15}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/180, 0xb4}, {&(0x7f0000001180)=""/223, 0xdf}, {&(0x7f0000001280)=""/247, 0xf7}, {&(0x7f0000001380)=""/114, 0x72}, {&(0x7f0000001400)=""/78, 0x4e}], 0x7, &(0x7f0000001500)=""/232, 0xe8}, 0x40) 15:36:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:37 executing program 4: unshare(0x2000400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) [ 514.265466][T19888] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 514.282095][T19896] usb usb2: usbfs: process 19896 (syz-executor.3) did not claim interface 0 before use [ 514.306968][T19896] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 514.334389][T19896] usb usb2: usbfs: process 19896 (syz-executor.3) did not claim interface 0 before use [ 514.354065][T19896] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 514.389835][T19900] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:37 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:37 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:37 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x4, [@restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @enum={0x8, 0x5, 0x0, 0x6, 0x4, [{0x4, 0x31}, {0xc, 0x1f}, {0xc, 0x5d2f}, {0xe, 0xffffffffffffe077}, {0xf, 0x401}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x7, 0x4}, {0x9}, {0x9, 0x4}, {0x6, 0x1}]}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000180)=""/163, 0x94, 0xa3}, 0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000040)={0x6, 0x7f, 0x101, 0x4, 0x100000001}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x7}]}]}, 0x28}}, 0x0) r3 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492540, 0x0) [ 514.939325][T19917] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 514.974391][T19919] usb usb2: usbfs: process 19919 (syz-executor.3) did not claim interface 0 before use 15:36:37 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:37 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 514.988262][T19920] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 515.004033][T19919] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:38 executing program 4: 15:36:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:38 executing program 4: 15:36:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 515.137614][T19931] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 515.167096][T19935] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:38 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:38 executing program 3: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) syz_open_procfs(r0, &(0x7f0000000000)='net/fib_triestat\x00') syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) 15:36:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:38 executing program 0: syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x20000) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:38 executing program 4: 15:36:38 executing program 4: 15:36:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 515.846062][T19954] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 515.909177][T19961] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:38 executing program 4: 15:36:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x4000, 0x3}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x7a, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000200)={r7, 0x200}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r8, 0x10001}, 0x8) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e23, 0x401, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x40}, r3}}, 0x38) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r9, &(0x7f0000000100), 0x18d, 0x4000) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x7a, &(0x7f00000000c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000140)={r12, @in6={{0xa, 0x4e22, 0x70e, @local, 0x7fffffff}}}, 0x84) [ 516.105112][T19975] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:39 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:39 executing program 4: 15:36:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000008c0)={0x6, r0, 0x1}) r10 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r10) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) r13 = getegid() r14 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r14, 0x138) fsetxattr$system_posix_acl(r14, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r13}, {}]}, 0x3c, 0x1) getgroups(0x1, &(0x7f0000000900)=[r13]) r16 = gettid() r17 = getuid() getresgid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)=0x0) r19 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r20 = ioctl$KVM_CREATE_VM(r19, 0xae01, 0x0) r21 = ioctl$KVM_CREATE_VCPU(r20, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r21, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r22 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ashmem\x00', 0xa2081, 0x0) r23 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r23, 0xae01, 0x0) r24 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r24) r25 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r26, 0x0) r27 = getegid() r28 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r28, 0x138) fsetxattr$system_posix_acl(r28, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r27}, {}]}, 0x3c, 0x1) r29 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r30 = ioctl$KVM_CREATE_VM(r29, 0xae01, 0x0) r31 = ioctl$KVM_CREATE_VCPU(r30, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r31, 0x4008ae90, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000000000000000000800000000000000000020000000000000000000000000000000000000000000000000000000100"/88]) r32 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r33 = ioctl$KVM_CREATE_VM(r32, 0xae01, 0x0) r34 = ioctl$KVM_CREATE_VCPU(r33, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r34, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r35 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r35, 0xae01, 0x0) r36 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r37 = ioctl$KVM_CREATE_VM(r36, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r37, 0xae41, 0x0) r38 = openat$full(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/full\x00', 0x250040, 0x0) r39 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000001300)={0x3, 0xffffffff, 0xfffffffffffeffff, 0x144800, r0}) r41 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r41, 0xae01, 0x0) r42 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r43 = ioctl$KVM_CREATE_VM(r42, 0xae01, 0x0) r44 = ioctl$KVM_CREATE_VCPU(r43, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r44, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r45 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r45, 0xae01, 0x0) r46 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r47 = ioctl$KVM_CREATE_VM(r46, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r47, 0xae41, 0x0) sendmmsg$unix(r2, &(0x7f0000001380)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="fe76db878f47fcef344fce542ec8d4e24528e7bbbfef6bc62857929b80c79459d6f13ae27bca4eca5c49d8102d08f97801383f24253526fb397a49767013ebc471ad01182530c350066659991fa016218d2d5e2bb04d0313d86bb42b23944957512791815d8330300d0e", 0x6a}], 0x1}, {&(0x7f0000000280)=@file={0x3, './file0\x00'}, 0x6e, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x4c000}, {&(0x7f0000000340)=@file={0xa9d79d12142b8d98, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000003c0)="e1c33914d780541b3512c7a63b", 0xd}, {&(0x7f0000000400)="cd4ac9f69d00b4220b70d623ee5f9ce45d63f24d4d09c54d9d57f9f81fb11cc386489ba2c80d5bf616655941a3710e7c7f6511d48bdc309d47780fd991dab125dd6fc2ad976500ee39b95d63d115eade81986adfadfc33ab5eabbed09c63b4f2441f2ebbc02d649600e543", 0x6b}, {&(0x7f0000000480)="7c2fbcb5ab1e63c325d9f18c79f4f4ecdfabcb8bd5933289ebbde58c3049c27fa18ab1f16932fee423ff29097c32285d09cecb31467de16ace67fc2027fdd78505fecd45dd9dd544372b6789d14b6e0f8ccaeb78f5c572d3a16b234e93fa224c5307aec1664f83896a53c3e201caa70c68d714148f86952f7148444cc4a49c3d9a9a2c09ab93076846502a95032c304bc13cb921d536acc9b56ab2849bc12ec5b52266b04be6e07ad7ddee53df81de19eb1a4acda74bc13c95798b43ba9ed299b895422551a06f117d578d11ecdceb1d592960587a1954eefb8b135224d0d891f6270c9d0a39b15b7fbd781fdd2a936d", 0xf0}, {&(0x7f0000000580)="9a5353f2273d3c73fb4f04e801ec6d3b7189684236d3de69e0d4d37a0b630aa7be1aaaa71009413a4afcc61df59b41ed76af841b9d85c33eb1633394195bfc9463e1d4aa4f1e4c3a9308f20db0ed50cabb65964b3698973bdf6650e59345f46a936e352f70c5febfc160c286518b5719b6d53f9d8201aa649b4fcb3a4771892daafae099f9fa7d3f8853afccc032989b651bf5e02e4e115f66daf203c7ede89e40e11647338bdb", 0xa7}, {&(0x7f0000000640)="2bbdb1a9456ce92ee44fff430eaa9aac552909cdab827076fe26f31657ce9d7dd1dc9f6fff8bd5c3ee21b93990f5fe49721f9a510480be2175357d236b99496370d2d72a3aed996d519aa909319ddbf85f69e6fdc371d694a83a657d8a2e4f43cc8a2f52e42c99e7a15db875da946cf46eb505c573b6d71451759d2ce943c22178458888e26fb992a586d7ad51b94a238da0cf1b78b0b02446ea1b8bbe7d9b1535487ef8dc95ff428ed0ddfa7df7f864a456c1a23170f97625c3afcc997c7fa0944162c202a915b2d1f95549b68b39b554af65fc57e2ee4907c88940e63794e5124adbd1237b96", 0xe7}, {&(0x7f0000000740)="bcf92387bbba7c0cd58efec9e1e3fc60af954b328664b17708c6bb2e7bddb65b7e5ef2656cce553b4a7c94bd61afa1b8f16b665c3e94cfa17d107c6ce9c0f9889047d93ad06825de457684141b5c581e93027eddb9a3e5afba347e0d2b5128dd7bce4d019c7593bc9413e35bc3d0191a4f14bcb5389c27241e086374bdbd742312436cde0ed022e575499db1d3e5a9ddf331001e4f0bc6076e9a079907778363f3f4b9fb309f0d969eb2e83bead2e7948262c1a3de1afb1e97f62816bbead5a169d904de5a", 0xc5}], 0x6, &(0x7f0000000a80)=[@rights={{0x34, 0x1, 0x1, [r5, r1, 0xffffffffffffffff, r7, r8, r1, r0, r1, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x24, 0x1, 0x1, [r0, r21, r1, r22, r23]}}, @cred={{0x1c, 0x1, 0x2, {r24, r26, r27}}}, @rights={{0x2c, 0x1, 0x1, [r31, 0xffffffffffffffff, r34, r35, r0, r37, r38]}}, @rights={{0x14, 0x1, 0x1, [r39]}}], 0x108, 0x24004000}, {&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000c40)="6b68cc5d1ce4e678d4f96597668dadb427c55ffe582549bdeb667f53ec3fec1423e1ccba1e1a78e1c144c7", 0x2b}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)="7c485a7a29768a39df61834ef01271da5bcdc35b879a0d506b5e48bf405b4d1b7bcc77cfc4d7120ca2d980000805a5e8e04e8061961e9694ae24a0949967261959af531f1bb8c5da6f4d90a2ab2139f626c5831c4eb249d4a8d391abfcd624c5224b8f0832fa73c9e1666e38bebc417637158aad76da786f0cdeea6fbfb5175857c1cfb73d75299712378fa63d1e5be866ac77f40a7bfba8d89e904b456037e2115b34eafbfe78bc78de397b10e66c47771b9292964e9f15788c5166bd1f6042db87733eaab3c8399dd131e59e79bac6d02e4ced8baaadff4cb5e2b7dcd8db11625095b78f385592f3e034d3df3a", 0xee}, {&(0x7f0000000dc0)="a696813dd558e303f738423b074544bad9e277c8f54cec831b2ea17022134fd21a00b311e322609056bb2a467efdb8a7935e1da3e545b298d34067885d452bd6eae2d0c641c7427a1fecb3e3af08687e98e0dd6daa4e613653762f479b2d892a20984099ce89a919e2462fc07f19bf609ff5942f3af81b2effcb54f24a0d2b413de76c8109a5a02d0765e6877065", 0x8e}, {&(0x7f0000000e80)="10177181b52beacd4cae8e613ab33830122fd19b06cab9681f4bdbd8918d739538b177fe7a6ea08944845d7d4404ef7c394d4d4c999330709aabc2d6bd198c2fe941d33c84cda58db5c3d10dfd679c58c0c15d99f8cb754f05f07edde732af355b760d8c34d364913f0f67104b7419158ce3fd31e2d2ba0d11fde6de7faf6cb3ff335dc15dc8a5e101cc06efe8eb32270e31966378e6790285503cd55377190e95ac1ffd091d53be0a324872e9658504af43031bba3f172f3ace143d840a8bd542071a832c2dc1cd0c2ca0f8d2ea3539b6fa56", 0xd3}, {&(0x7f0000000f80)="2961e1ceb49489a9d1859bc1b62408690b9d3137413159748d23fb7d2f3c8a647976be0bb0406688f7b80dac449315487aad086deb2d58451c3e34a6350715644f8a61e616b47a93638c4f2ee797757617490acb6c14cfb753f7b18663c0d223413134415b8143664f7e856c47c1157bfa9fa95968044cf52e16dc601c4cac91ac8ffd7578e86654286b10fd3787310b0204f5", 0x93}, {&(0x7f0000001040)="c54edf262965f209350d71f5dc84709ef25dd04dff88e175ee5ab1f38922e35225f6cbff469681fcd6d654f648beec6732c472a565b8e55e9d16b8abe723c9f69c24a665fb2057cdfd56d33675e60b24834cb61abc3f7c58aead204c0319080ce113b0215680dd72662f25f90f4833e63c8dc317b17fefa23befae570352f1c7e35cc4d238aca4d88598bfc6c877b53eea0107eb419e6274ee2338badd4769f56c3d73da89d3ed0cd590686761ec1df495d7defd1ca15084694bb7c6b9a881433da5b4fbcce9fc71408f585e78cb4a85d42f57498ce0c05cdb", 0xd9}, {&(0x7f0000001140)="86278c68ac84a437eb0675ed", 0xc}, {&(0x7f0000001180)="5f8531c9cdd30ac93e2e4de1d177965ef93e8bd6b29c9e843b9be1993d51ea73224fd11aa06738e417d7a1636c77d597b67a3902b4a2e1da099a4dd47b091eca4b9e4bf8a16bb225b4401ad306ca7c640aba19cce9cece1c3367c352de291265bd9b6500b1294b5901db09ac8ba061e71345ddf656999c6143feba715e2b68ba3149ea", 0x83}], 0x9, &(0x7f0000001340)=[@rights={{0x14, 0x1, 0x1, [r40]}}, @rights={{0x28, 0x1, 0x1, [r41, r44, r1, r0, r45, r47]}}], 0x40, 0x10}], 0x4, 0x24) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) 15:36:39 executing program 4: 15:36:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:39 executing program 4: [ 516.900764][T19984] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:39 executing program 4: 15:36:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400, 0x0) fstat(r1, &(0x7f00000000c0)) 15:36:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:40 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7a, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r4, 0x64f, 0x0, 0x9, 0x7}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r5, 0xdc, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x9, @local, 0x9}, @in6={0xa, 0x4e24, 0xc67, @rand_addr="98660ea83c0e980c5c926efc429e4e21"}, @in6={0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, [], 0x18}, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, [], 0x10}, 0x40}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000200)=0x10) 15:36:40 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:40 executing program 4: 15:36:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 517.250253][T20030] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 517.290440][T20030] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) clock_getres(0x9, &(0x7f0000000140)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r1, r2/1000+30000}, {0x77359400}}) 15:36:40 executing program 4: [ 517.355109][T20038] __nla_validate_parse: 4 callbacks suppressed [ 517.355118][T20038] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:40 executing program 4: 15:36:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 517.433564][T20046] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 517.476763][T20050] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:40 executing program 3: socket$isdn(0x22, 0x3, 0x24) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0xfffffe4d) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000200)={0x8, 0x1c00000000, 0x7fffffff, 0x2fb, 0x16, 0x9, 0x9, 0x1, 0x7fffffff, 0x3ff}) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0x200800000000042) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$char_usb(r6, &(0x7f00000000c0)="884996f210894a8b1e14bf624942f558f1a0dc7995a58e99eb427ba9efc6592b6be0d24b64e8361451030248310f2b2c4bbb2f4e72c9d33e4b16d4bda61d951a9ab16a71441edf099e24dd83bce2b859a1f115de2dd89a072815b1afb4562be7ea0beca79345501f8087d9141b50a8f3db398f5ab3a5669aec41a487c8e4fb553a94c13b69f53286b37e094303fb5868f80fd33b4c0f9db20c987bda7e98658baba177fe2ae8c1eee5edd9c15e9c5ff5057d59c5191c0c0e85a362159731c3c6e78336a92fc08b5ca9cae688fe91dbef2af6b2dfdadfbb799543b8b38a79ed48488e319987", 0xe5) ioctl$FS_IOC_FSGETXATTR(r5, 0xc0185500, &(0x7f0000000040)={0x5, 0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x7ff0bdbe}) 15:36:40 executing program 4: 15:36:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:41 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) write$selinux_attr(r0, &(0x7f0000000180)='system_u:object_r:setfiles_exec_t:s0\x00', 0x25) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x5c, 0x4, 0x10000, 0x0, 0x5, 0x7ff0bdbe}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) bind$x25(r2, &(0x7f0000000240)={0x9, @null=' \x00'}, 0x12) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) ioctl$sock_netdev_private(r4, 0x89f9, &(0x7f0000000280)="289b3932b5") preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) getpeername$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000040)) 15:36:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:41 executing program 4: [ 518.060237][T20063] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:41 executing program 4: 15:36:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @raw_data="c93f29ca4f5ef1c89fb5228d87b45f2b588c949a69ff987b391f310d11344651cd58c062be3299c762e95a7934939790aebb6f3def2ad0641e03e5edd9e7477d5dcc8ff99549e2479e6258f1cee13f6583483d6aa9b1cfcdc57a405d2e6ce17aaf5ac786fe9f7197b2df415d80ff8004f2b3933d4673e023622803e6d12aa63652136f23e4feb4de4f5838246e4ec2b4e8770de4123b749f3297463faf843f7ee6d7d2b8ee8143e349915eeeb3e0006d1be5c4f12059f0b36abf1219ec5dce6d2d7ad7a78340d1f9"}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x4000000000005c, 0x2, 0x101, 0x0, 0xedf, 0x7ff0bdbe}) 15:36:41 executing program 4: 15:36:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:41 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2b0000000702001e002765746830407d236367726f7570262d626465767600"/43], 0x2b) preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7a, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e21, @remote}}, 0x3, 0x5a5c, 0x4, 0x7fffffff, 0x7fff}, &(0x7f0000000040)=0x98) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xc, 0x0, &(0x7f0000000200)=[@register_looper, @release={0x40046306, 0x2}], 0x12, 0x0, &(0x7f0000000240)="d680ec1d2b537eab90464d755bcd9db6a04b"}) 15:36:41 executing program 4: [ 518.350696][T20090] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 518.368266][T20089] vhci_hcd: default hub control req: 5c00 v0000 i0002 l0 [ 518.410599][T20097] vhci_hcd: default hub control req: 5c00 v0000 i0002 l0 [ 518.449350][T20099] usb usb2: usbfs: process 20099 (syz-executor.3) did not claim interface 0 before use [ 518.500165][T20099] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 518.581262][ C0] net_ratelimit: 22 callbacks suppressed [ 518.581270][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 518.592900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 518.598706][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 518.604618][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 518.610436][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 518.616210][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:36:41 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='.ds\x00\x00\x00\x00\x80\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x25, 0x80000000, 0x9}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x401, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@deltclass={0x6c, 0x29, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, r2, {0x2, 0xffff}, {0x7, 0xfff2}, {0xc, 0xffff}}, [@tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x34, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x6, 0x81, 0x431}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x6, 0x272edf49}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x9, 0x3d72}}]}}, @TCA_RATE={0x8, 0x5, {0x3, 0x7}}]}, 0x6c}}, 0x72df9d0c3b8674c8) 15:36:41 executing program 4: 15:36:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:41 executing program 4: [ 519.010080][T20111] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:42 executing program 0: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x1, 0x40001fffffff, 0x7ff0bdbe}) 15:36:42 executing program 4: [ 519.141245][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 519.147069][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 519.196441][T20128] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 519.243455][T20099] usb usb2: usbfs: process 20099 (syz-executor.3) did not claim interface 0 before use [ 519.297594][T20099] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:42 executing program 2: socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:42 executing program 4: 15:36:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:42 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$getown(r1, 0x9) 15:36:42 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:42 executing program 4: 15:36:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 519.416856][T20143] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 519.428486][T20141] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 519.451274][T20149] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:42 executing program 4: [ 519.484694][T20150] usb usb2: usbfs: process 20150 (syz-executor.3) did not claim interface 0 before use 15:36:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000002) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) [ 519.559116][T20150] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 519.584346][T20158] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:42 executing program 4: [ 519.614429][T20164] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 519.657706][T20164] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:43 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7ff0bdbe}) 15:36:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x640100, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000180)={0x3, 0x6, 0x9, 0x5, [], [], [], 0x7, 0x4, 0x9, 0x3, "2930697815ab82ac9c20b58e6367699f"}) setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)="53f18d2fff0266108e8fa8fcd1d35e413fb191fcce806c66dfbbf391683215294bebb0438214c99db2091eed411fc07da9fe3405104605cf3068b84756e140001ee639921e7f85a22edc7400032ea39f1d5260116ec4a493472c142ce6121a2db17fdc2d2ba4ebe71869dce39f232f24ced90b2d6ae8612680f8b83ed7364b0d832ddc05982f4d4db1ce55c682d37759e185c06ec4e6d4c74820de81636c20", 0x9f) 15:36:43 executing program 4: 15:36:43 executing program 2: socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:43 executing program 4: 15:36:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 520.280651][T20182] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 520.299455][T20182] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 520.307332][T20176] usb usb2: usbfs: process 20176 (syz-executor.3) did not claim interface 0 before use [ 520.307965][T20183] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f00000000c0)={[0x6000, 0x4, 0x2, 0x1000], 0x6, 0x40, 0x5}) [ 520.361568][T20176] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:43 executing program 4: 15:36:43 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7ff0bdbe}) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x5, {0x0, 0x1}}, 0x20) [ 520.459256][T20197] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:43 executing program 4: [ 520.605368][T20203] usb usb2: usbfs: process 20203 (syz-executor.3) did not claim interface 0 before use [ 520.608292][T20207] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 520.634217][T20209] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 520.648035][T20203] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:43 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 520.661231][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 520.667396][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 520.691940][T20203] usb usb2: usbfs: process 20203 (syz-executor.3) did not claim interface 0 before use [ 520.728172][T20203] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 520.779904][T20209] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:44 executing program 2: socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:44 executing program 4: 15:36:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x23366c037ccc437d, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0xffffffffffffffff, 0x0, 0xfffffffffffffff7, 0x4000000000000, 0x7ff0bdbe}) 15:36:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff8, 0x4000) 15:36:44 executing program 4: [ 521.250859][T20232] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:44 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)='##eth1posix_acl_access---&@selinux\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) 15:36:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 521.297996][T20232] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) 15:36:44 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 521.444459][T20249] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 521.454844][T20248] usb usb2: usbfs: process 20248 (syz-executor.3) did not claim interface 0 before use [ 521.483331][T20248] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 521.509244][T20249] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 521.520599][T20248] usb usb2: usbfs: process 20248 (syz-executor.3) did not claim interface 0 before use [ 521.557555][T20248] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:45 executing program 2: socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:45 executing program 4: 15:36:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:45 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) 15:36:45 executing program 0: syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x44000) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) 15:36:45 executing program 4: 15:36:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:45 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x800) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0xfffffffffffffff7, 0x6, '9P2000'}, 0x13) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) write$P9_RVERSION(r1, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0xe, 0x8, '9P2000.u'}, 0x15) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xb9, 0x8, '9P2000.u'}, 0x15) 15:36:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000002300020226bd7000fcdbdf25200000000c000c00ff7f00000000000080006300ed8282ca1e8c2c049b5c71bc9d3e291bbdfeb0ae248ee977458bac8a6338d426e7043e6d9042666347f94a7891e36554e2015373850a2da9006c476465ca91f33499fbe68bb4dfacc5dbc874936eb280eed052221153d5d8ecaa00bea544cead7795cc92ea791744f1544fb7ae21defd483910cbbd3489b4e6db7d53aa8e3835d77c2a3354da8be8efa826ec66b1ba95bd1cba28475953f01e944559b830f804ab7b6315d8db7c49596e5140b8044727ecd8e991033ec2e6682dd5ac7d39ba3195780ecdeb984d3ef76d8b00"/252], 0xa0}, 0x1, 0x0, 0x0, 0x4000040}, 0x24) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f0000000100)=0x1) 15:36:45 executing program 4: [ 522.378168][T20290] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 522.471693][T20290] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:46 executing program 2: socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:46 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x5, 0x30801) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:46 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:46 executing program 4: [ 523.106626][T20302] __nla_validate_parse: 4 callbacks suppressed [ 523.106637][T20302] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:46 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4011, r0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='cgroup2\x00') 15:36:46 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 523.242784][ T26] audit: type=1400 audit(1568648206.184:58): avc: denied { map } for pid=20312 comm="syz-executor.4" path="/dev/zero" dev="devtmpfs" ino=16285 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:zero_device_t:s0 tclass=chr_file permissive=1 15:36:46 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x101) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40000, 0x0) 15:36:46 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)={[{@nls={'nls', 0x3d, 'none'}}], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}) [ 523.378709][T20320] usb usb1: usbfs: process 20320 (syz-executor.3) did not claim interface 0 before use 15:36:46 executing program 2: socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:46 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 523.480430][T20334] usb usb1: usbfs: process 20334 (syz-executor.3) did not claim interface 0 before use [ 523.481351][T20330] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:46 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:46 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x40, 0x101000) write$UHID_CREATE2(r0, &(0x7f00000000c0)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0xfb, 0x50fa, 0x20, 0x0, 0x8, 0x5, "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"}, 0x213) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 523.637664][T20333] ntfs: (device loop4): parse_options(): NLS character set none not found. [ 523.666597][T20345] usb usb2: usbfs: process 20345 (syz-executor.3) did not claim interface 0 before use 15:36:46 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 523.696333][T20345] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 523.723585][T20349] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:46 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) pipe2(&(0x7f0000000040), 0xf16f7be1b85fdc1a) [ 523.759884][T20351] ntfs: (device loop4): parse_options(): NLS character set none not found. 15:36:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x49, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) 15:36:46 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:46 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x22084, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x100000001, 0x0, 0xf3c1, 0x8, 0x8, 0x1, 0x10000, 0x200, 0x9, 0x2, 0x4, 0x6, 0x7, 0x8, 0x2, 0x2]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, {0x3, 0x7, 0x2, 0x0, 0x1, 0x6}}, 0x8) 15:36:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 523.950173][T20364] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 524.054723][T20369] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 524.059351][T20371] usb usb2: usbfs: process 20371 (syz-executor.3) did not claim interface 0 before use [ 524.144312][T20371] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:47 executing program 2: socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:47 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)={0x1, 0x1f}) 15:36:47 executing program 4: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 524.359132][T20392] usb usb2: usbfs: process 20392 (syz-executor.3) did not claim interface 0 before use [ 524.379854][T20388] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 524.420376][T20392] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 524.507133][T20392] usb usb2: usbfs: process 20392 (syz-executor.3) did not claim interface 0 before use [ 524.529855][T20405] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 524.566295][T20392] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:47 executing program 3: r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0xfffffffffffffe14, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/245, 0xffffffdb}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f0000001140)=""/177, 0xb1}, {&(0x7f0000000480)=""/239, 0xef}], 0x6, &(0x7f0000000600)=""/65, 0x41}, 0x4}, {{&(0x7f0000000680)=@pppol2tpv3, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/250, 0xfa}, {&(0x7f0000000f80)=""/237, 0xed}, {&(0x7f0000000900)=""/143, 0x8f}, {&(0x7f00000009c0)=""/227, 0xe3}, {&(0x7f0000001200)=""/101, 0x65}], 0x5, &(0x7f0000000bc0)=""/109, 0x6d}, 0x401}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001080)=""/106, 0x1db}], 0x1, &(0x7f0000000cc0)=""/138, 0x8a}}], 0x3, 0x2000, &(0x7f0000000e40)={0x77359400}) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000e80)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000006a0000008d3fb2c792ce9615f021f855d0da0683938012af62ca898f6d24035bb8644d928b4de7030d667b54c9c6caa6ddc44830a9b2b7fdfa1f1860a9f98204e20b5346d3a21f93033267c74280fd48cb7cf0acecfb4b098434c28b64340c7ecb30"], &(0x7f0000000f40)=0x8e) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) 15:36:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 524.821246][ C0] net_ratelimit: 18 callbacks suppressed [ 524.821254][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 524.827251][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 524.839197][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 524.845357][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 524.851391][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 524.857377][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:36:48 executing program 2: socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x62, 0x1, 0x3f}) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x8, 0x204080) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) [ 525.307014][T20432] usb usb2: usbfs: process 20432 (syz-executor.3) did not claim interface 0 before use [ 525.341605][T20432] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) [ 525.381249][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 525.387776][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 525.393674][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 525.399857][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:36:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bu#/\x06\x00', 0x10000, 0x14d221) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:48 executing program 2: socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xee6, 0x80000) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 15:36:48 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) [ 525.740963][T20467] usb usb2: usbfs: process 20467 (syz-executor.3) did not claim interface 0 before use 15:36:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 525.798810][T20467] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:48 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80db8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0), 0x4) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x6, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:48 executing program 4: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:48 executing program 4: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x3, 0x6, 0x9, 0x800, 0x2, 0xfffffffffffffff8, 0x0, 0x7f}, 0xb) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000180)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x80) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) sendto$inet6(r1, &(0x7f0000000080)="db9130096c3b483c11d9e86d229fa95d7f1abf3f58ffcba4d6601c0618bb6dbb0be7613fa568987d58c1eb6aebeea5462f1cd8f54d39a6fd9de50cdaae79773abc1f9e964441a004915174e1291e97a50dc430c5c761d3eff8dd689ed33bdd173be75a7d9d", 0x65, 0x8040014, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @mcast1, 0xffffffffffffff01}, 0x1c) 15:36:49 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:49 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:49 executing program 4: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:49 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x206040, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000240)=0x5) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/devG\xc9\xd3\xf54Hk\xa3/00#/00#\x00', 0x1, 0x200800000000042) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000280)={r2, 0x80000000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x7a, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x2, @local, 0xd}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r5, 0x8001, 0x9, 0x80}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r6, 0x9127, 0xbd}, 0xc) r7 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x2000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x8801, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r8, &(0x7f0000000100), 0x18d, 0x4000) ioctl$KDDELIO(r7, 0x4b35, 0x8) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "252ea3e72999750a", "9fd516bfcccf94c102bab3d4388179ad", "f1beb728", "ff8d3e314218dc76"}, 0x28) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/b/00#/00#\xe3\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2aa, 0x4000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x40b}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={r2, 0x80000001}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:49 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:49 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:49 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80200, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000180)=""/108) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000142) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r3 = getpid() ptrace$getsig(0x4202, r3, 0x1, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0x1) inotify_rm_watch(r5, r6) inotify_rm_watch(r4, r6) preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000040)=0x5, 0x4) [ 526.636826][T20520] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:49 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:49 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) [ 526.683169][T20520] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:50 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000240)={0x1000, 0x8, 0x7ff, 0x60, &(0x7f00000000c0)=""/96, 0xf8, &(0x7f0000000140)=""/248, 0x33, &(0x7f0000000040)=""/51}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000280)=""/108, 0x1034000, 0x800, 0x1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:50 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:50 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/devL\x91E\x95PeA\x19/00#/0n#\x00', 0x40000000db8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:50 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:50 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) restart_syscall() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x400200, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r3}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2000, 0x0) accept$alg(r4, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x3000, &(0x7f0000000040), 0x8, r1, 0x1}) open$dir(&(0x7f0000000140)='./file0\x00', 0x80000, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 527.475950][T20546] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:50 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:50 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x410000, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0xb) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x8001, 0x24, [0xffffffff, 0x6, 0x7, 0x9, 0x3, 0xffff, 0x9, 0x100, 0x101]}) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x800000000db8, 0x240000) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 527.528419][T20560] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 527.558895][T20562] usb usb2: usbfs: process 20562 (syz-executor.3) did not claim interface 0 before use [ 527.595315][T20562] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 527.654636][T20568] usb usb2: usbfs: process 20568 (syz-executor.3) did not claim interface 0 before use [ 527.705797][T20568] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:36:51 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:51 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x1f, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x201, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0xea, 0xc, [0x40, 0x200, 0xff]}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:51 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) fsmount(0xffffffffffffffff, 0x1, 0x2) 15:36:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) [ 528.347635][T20590] usb usb2: usbfs: process 20590 (syz-executor.3) did not claim interface 0 before use 15:36:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 528.404266][T20589] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 528.412050][T20590] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 528.453322][T20596] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:51 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev\'bus/usb/00#/00#\x00', 0xff, 0x200800000002040) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:51 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 15:36:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:52 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) r2 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x1, 0x408040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r4) prlimit64(r4, 0x0, &(0x7f0000000140)={0x8001, 0xa63}, &(0x7f0000000180)) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc004ae0a, &(0x7f00000001c0)={0x8d}) poll(&(0x7f0000000100)=[{r1, 0x1190}, {r2, 0x2000}, {r0, 0x100}, {r0, 0x10100}], 0x4, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 15:36:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:52 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xe391, 0x8000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x33, @local, 0x4e21, 0x3, 'lblc\x00', 0x1f, 0x400, 0x29}, 0x2c) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000100), 0x18d, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r5, &(0x7f0000000100), 0x18d, 0x4000) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1}) r6 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x10000, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000340)={0x0, 0x81, 0x539, 0x1}) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000240)=0x2) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0185500, &(0x7f0000000000)={0xa1, 0x9, 0x1, 0x8, 0x1, 0x7ff0bdbe}) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7ff, 0x4000) accept4(r2, &(0x7f0000000180)=@ethernet={0x0, @random}, &(0x7f00000000c0)=0x80, 0x80400) write(0xffffffffffffffff, &(0x7f0000000280)="f4e156ce4e4e9733c71a0b3259befca6dde6ab41faba1f165b2c37d1ecf3922b7b1b7c6b3360fa0298e4f21d29e3cd72ee07e32fdaeac4ea7b94f78a0d44030003ea9ba5a0954bd2a12c178f252e7fa5bc5381a72ddf821b60dc27d1ee2219efe2c8edfe5d842cffdd03f6fabb82017cba0c49063bb2b91667a03362a523de17e190d0402d1d1750fb9174ce0cb0e0a8e32625f88142adbd9534feb4df6eb2ea25b178e73e68aa3bf416a40148385e0b6bdf1641ef0e4609c532125fe49409e7", 0xc0) [ 529.268645][ T26] audit: type=1400 audit(1568648212.204:59): avc: denied { getrlimit } for pid=20622 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 15:36:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) [ 529.315390][T20623] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:52 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) dup(r0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x40) fcntl$addseals(r1, 0x409, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa0, 0x100000000000000, 0x0, 0x0, 0x3, 0x7ff0bdbe}) 15:36:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:52 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x3, 0x7ff0bdbe}) 15:36:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) [ 529.656023][T20660] vhci_hcd: default hub control req: 0300 v0000 i0000 l0 15:36:52 executing program 3: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) inotify_init1(0x800) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x0, 0x200000000003ffe) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x194, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x48, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5ef}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff9}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}, @TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe34}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x54809) [ 529.775721][T20667] usb usb2: usbfs: process 20667 (syz-executor.3) did not claim interface 0 before use 15:36:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 529.819837][T20667] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 529.858851][T20677] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:52 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb9, 0x100) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:52 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x0, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 529.963337][T20677] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x0, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000001c0)='/\xbe\nv/b/\xe3\x10#/00#\x00\a\x00\x00\xdf\x00', 0x40000a70, 0x200800000000042) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$getsig(0x4202, r1, 0xffffffff, &(0x7f0000000100)) fsetxattr$security_smack_transmute(r0, &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0xa000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) ioctl$FS_IOC_FSGETXATTR(r5, 0xc0185500, &(0x7f0000000180)={0x2, 0xffff, 0x1, 0x8256, 0x6, 0x7ff0bdbe}) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)=0xbbb3d2274ea2aa98) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xfffffffffff0bd8d) 15:36:53 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdbc, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x200000a1, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x7ff0bdbe}) 15:36:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:53 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) 15:36:53 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1f, 0x0, 0x0, "d0c79a82a436b15bdc9f91ca497e0c6d6f5f8ae099ea78912d924d8dd8f596d7"}) 15:36:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:53 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x9, 0x3}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000000c0)={0xbe, 0x2cd1, 0x2, 0x0, 0x0, [{r3, 0x0, 0x7}, {r0, 0x0, 0x4}]}) 15:36:53 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) io_setup(0x14, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x230}, 0x0]) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = epoll_create1(0x180000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x10046, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm_base(ecb-serpent-avx2,sha384))\x00'}, 0x58) preadv(r5, &(0x7f0000000100), 0x18d, 0x4000) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0xfffffffffffffffe, 0x7, {0x7, 0x1f, 0x7, 0x101844, 0x80000000, 0x76dcc192, 0xff, 0x7}}, 0x50) io_submit(r1, 0x3, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, r3, &(0x7f0000000100)="0239b00ee395a46054", 0x9, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x80, r4, &(0x7f0000000180)="97252996faa7fc2b18ec5261a906e2c749ea2ceb407d4ded94c43b66081aa646398207eb046b345e6de61bb667f28dc7f47ce7c0e6e24595b601fb23a8e09845b8120eeff579469f4eb451d0fb87119989ee9683ae8d668851dfb8385679b05dd0b553bfdbf78f02a9b200262839b23db12e085b54676976257dadc5eb179f562ec6b1b25dd96ef713b4e0d11d5760ba49904523a5e23404a9dce6d8c7de83f65530017424dc11f629428c4f06fe98daa609f18d232fcd29fb4e33b7711daff58b7c6e71888a2e34314d0095ad9e0071d1d5d3c37f56caea2de4c8667db1967bd3a647ae89f448b2e0e112684e7de1a391c148ab", 0xf4, 0x10001, 0x0, 0x2, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f00000002c0)="16b2303b19cbd4cedf9905c91698122bcfe0f9d5fe4ae28ac0e4c35735da348d52f3d833c0c26db08cef9c39e91b66c6ff14e4935980a649440333130d8b3c5a27076ef5c108ebae7b3fdabde0e79c99a125b94d5e07475db819c2064d091e0b947725612a710dcd5b17784440050877c4238b7b163984ebcac452", 0x7b, 0x0, 0x0, 0x2, r0}]) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 530.979182][T20735] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 531.019305][T20738] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x5ed, 0xfbc74c332bf3dc54) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) flock(r4, 0x3) fsetxattr$security_ima(r1, &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@v2={0x3, 0x1, 0xe, 0x101, 0xf, "3ba3200d1d316b67a8c3d503b4f1b9"}, 0x19, 0x0) [ 531.061225][ C0] net_ratelimit: 22 callbacks suppressed [ 531.061232][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 531.072749][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 531.078670][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 531.078811][T20740] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 531.084483][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 531.097262][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 531.103078][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:36:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 531.180595][T20746] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:54 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x6, 0x100080, 0x2, 0x3fe, 0xfffffffffffffffc, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x4040) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x4e) [ 531.230550][T20745] usb usb2: usbfs: process 20745 (syz-executor.4) did not claim interface 0 before use [ 531.289468][T20745] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 531.360287][T20751] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000100)=""/76, 0x30}, {&(0x7f0000000180)=""/97, 0x1c1}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/171, 0xab}, {&(0x7f0000000500)=""/233, 0xe9}], 0x6, 0x4000) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='\x00\x94l\x172\x02\xe2\xa8\x9c', 0x400000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5f, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x7ff0bdbe}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) write$FUSE_POLL(r2, &(0x7f0000000380)={0x18, 0x0, 0x4, {0x6}}, 0x18) 15:36:54 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ecf0d9135ef2af5ef756cb172b3868fb036eccbd2ff04c552258025aca190c463316cd10dc2e313ad6e579e6b543e3711a45fd81eb18160812d67424fd91eea5baa950fcc8f3d96f281df1e7cf173e693435f23fa06deb77c81f192467b730e3d04a401a38c63a473ea41652b6717106ad29c306f9c45d21d3398e055f3db04707bdf15544933f3839ca136aec7418219678100334e6a7c0ca0ec853876a9da19cf66483915efaa30ff2d72a352d6de65f13b6d5043b0d6096eacf68b1f5a0cc271fe038cdae5064edc7f100c1dad1c32d2e0f949365e4a75c7a7ec34bc8070088185c30d43136cf", 0xe8) 15:36:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2840, 0x1) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000300)={0x2, 0x6}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7ff0bdbe}) r2 = open(&(0x7f0000000040)='./file0\x00', 0xa0800, 0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000280)='GPL\x00') setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000000c0)={0x0, {{0xa, 0x4e24, 0x8, @local, 0x6}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ff}}, {{0xa, 0x4e23, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80000001}}]}, 0x190) [ 531.663609][T20766] usb usb2: usbfs: process 20766 (syz-executor.4) did not claim interface 7 before use [ 531.697524][T20768] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 531.723871][T20771] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 531.763932][T20772] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:54 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ecf0d9135ef2af5ef756cb172b3868fb036eccbd2ff04c552258025aca190c463316cd10dc2e313ad6e579e6b543e3711a45fd81eb18160812d67424fd91eea5baa950fcc8f3d96f281df1e7cf173e693435f23fa06deb77c81f192467b730e3d04a401a38c63a473ea41652b6717106ad29c306f9c45d21d3398e055f3db04707bdf15544933f3839ca136aec7418219678100334e6a7c0ca0ec853876a9da19cf66483915efaa30ff2d72a352d6de65f13b6d5043b0d6096eacf68b1f5a0cc271fe038cdae5064edc7f100c1dad1c32d2e0f949365e4a75c7a7ec34bc8070088185c30d43136cf", 0xe8) [ 531.861225][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 531.867035][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 531.880231][T20776] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 531.948598][T20780] usb usb2: usbfs: process 20780 (syz-executor.4) did not claim interface 7 before use 15:36:55 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='kd,\xd7J\xef-\xda\x9e\x10cb/00#[\x050#\x00', 0x3, 0x480) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x20100, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000080)={0x108000, 0x4, 0x5c47, 0x6, 0x83, 0x7ff0bdbe}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$TCGETS(r1, 0x5401, &(0x7f0000000240)) preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0xac, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0) bind(r0, &(0x7f00000001c0)=@in={0x2, 0x4e21, @rand_addr=0x100}, 0x80) getsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000140)=0x4) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), 0x4) [ 532.040749][T20783] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="ecf0d9135ef2af5ef756cb172b3868fb036eccbd2ff04c552258025aca190c463316cd10dc2e313ad6e579e6b543e3711a45fd81eb18160812d67424fd91eea5baa950fcc8f3d96f281df1e7cf173e693435f23fa06deb77c81f192467b730e3d04a401a38c63a473ea41652b6717106ad29c306f9c45d21d3398e055f3db04707bdf15544933f3839ca136aec7418219678100334e6a7c0ca0ec853876a9da19cf66483915efaa30ff2d72a352d6de65f13b6d5043b0d6096eacf68b1f5a0cc271fe038cdae5064edc7f100c1dad1c32d2e0f949365e4a75c7a7ec34bc8070088185c30d43136cf", 0xe8) [ 532.214619][T20792] usb usb2: usbfs: process 20792 (syz-executor.4) did not claim interface 7 before use [ 532.226703][T20789] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) 15:36:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 532.430920][T20798] usb usb2: usbfs: process 20798 (syz-executor.4) did not claim interface 7 before use 15:36:55 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:55 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x9, &(0x7f0000000140)=0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0xb5, 0x0, 0x0, 0x7ff0bdbe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x5, 0x0, {0x0, 0x0, 0x1, 0x3}}) [ 532.503428][T20801] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r1, r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') 15:36:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 532.646155][T20810] usb usb2: usbfs: process 20810 (syz-executor.4) did not claim interface 7 before use 15:36:55 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/0\x10#\x00', 0xdb8, 0x2008000000020c3) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x8, 0x7ff0bdbe}) 15:36:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup2(r1, r0) [ 532.801029][T20815] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 532.864136][T20820] usb usb2: usbfs: process 20820 (syz-executor.4) did not claim interface 7 before use 15:36:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:55 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 532.994262][T20826] usb usb2: usbfs: process 20826 (syz-executor.4) did not claim interface 7 before use 15:36:56 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x5826d2870ed35c1a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000140)) r2 = syz_open_dev$usb(&(0x7f0000000080)='/d%v/cus/usb/0\xff\xff\xff\x7f0\x00', 0xdb8, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) r9 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r9) r10 = getpgid(r9) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) fstat(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r14) r15 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r17, 0x0) r18 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r19, 0x0) r20 = getegid() r21 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r21, 0x138) fsetxattr$system_posix_acl(r21, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0400f2ffffff97e6011e2cb17295bc99a7b523f8ccffffc1dc67cc61302a753d95ff07000100", @ANYRES32=r20, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x3c, 0x1) r22 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r23 = ioctl$KVM_CREATE_VM(r22, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r23, 0xae41, 0x0) r24 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r25 = ioctl$KVM_CREATE_VM(r24, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r25, 0xae41, 0x0) r26 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r26, 0xae01, 0x0) r27 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r27, 0xae01, 0x0) r28 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r29 = ioctl$KVM_CREATE_VM(r28, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r29, 0xae41, 0x0) sendmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x10000000004e20}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000012c0)="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"/388, 0xb0}, {&(0x7f00000003c0)="0b2e437a9439b96e0ffb2bc2cdb866791ea6a697d967ee4b146b260b2ca47eabe394f2d65a2e8526b977bc333428e223c7471f322910a7f366c3ec49c5483893135acd1954ed964494adaad1080cae64c18f2a1f69f806ec3d5a499ba53ce06eaba9585a8d5f85ccf3794240e12a7c43729d4a2df1fd7c01058e797f47120bd0cd43bc1b5b0429", 0x87}, {&(0x7f0000000480)="8ab2a428d113e241dbe65bbae411", 0xe}, {&(0x7f00000004c0)="334a80096e206177628fac96903e9f92b7bee34e462d0dd94cc4e9cf9b35f8bf348eadc1e1aaf8acdd7cba97c3492a9354d42c93aa2903f762ce1ca28c4fee376932dc662daccf52bd052c5ac096bd9049a4bce8f7b8a560d26353a4a42af82f35ee9d6ea4b478768d381fb64ed588ccfe9d350eff2e7346d90d29a84b21da3c35d5aee38f0581480ed583954287287869af9bd54ce4a5f8ee78714c6849a416159fe61b6b7967fe06ed34c5a346cddd41578190e075dda10390353ebb97b6eee736eb53199ba3cf982c1e2bc85b858ae18d0ae4acc4e0f8e9af8844cf6b55f364af3f", 0xe3}], 0x1000000000000239, &(0x7f0000001480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r10, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c0000000000e50001000000020000005ee261d1fc5cb54383dd41f98b25911b5d713b824b779cd9176e4efb83a2d0c139bb53bde4ca25b71006f546b0570a1bec538d52080bdfa08919bfb90da87f4268b4dce229ab283e07a63b007ab80858f5b72ceaae1e8a9e3dab0038fc566ac172f66897f64ad37b99ef7bb072804d55d46ad056da70ce267677b057eaeedfe988ad7871f6308d6a4a7300", @ANYRES32=r14, @ANYRESHEX=r15, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000b39aaf5fa483230c6030f2acb72e9600ae075deac82633a0ee61a219d8141bf948ea64b7e33a86349f90c177ad605f643631c0171c070f5acbc4fabd14dc5216fa30502b5198cbab01676e2466a1cc173b4b7d352b622a0638d656a9d63e26a7da886f53e1bbe500b49104f0c5e8367000ffb5dead20e98d13f9acc89e78b907c877008b0566dcab127c2c065a4b2fe9065317aea93fb8f758776a8f54b441fba6b2640d6ccb55139d59c6d117d1992b0c", @ANYRES32, @ANYRES32=r19, @ANYRES32=r20, @ANYPTR64=&(0x7f0000000cc0)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC=r23, @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES16=r25, @ANYPTR, @ANYBLOB="c1b2897ab25308cb428092bb26715b49202c5298e2065090e2d09f3f", @ANYRESOCT, @ANYBLOB="90df0cb511bf813c7458509c7f66b2abe30a3af5bdbd9f7a6cc5274d72e1d94908e2ec6213b2a02d486c54c798b17c01a557d3a2b7fc5c34a25e8db2e9e6264047cfa63eaa3423652cad1908348fd5f840333b8640b1c28477a9dd8296b970d13d4402228efafa78cc55c902b0a347a12383941e19bcd667dccc152dab24139b1a769986903eecb7aaafbbef8e2bfb1259980e589cdc756d4818697c7bb1bd035b0bcb01141e7d1921ece2b6218f02234499d6856edc5ee18554f499b28a1702aaa89730d44b1d4e014934cd04a90687b1353bf68bc417b6a05559c2371d1c81c6d4d587ad8dac0bddae", @ANYBLOB="aede6dd74aad628fee04815b104c9e9c0202f63b8bf1d7116cd340dc39fdecdea597f7de7cb172b9e9b8f0b4ac9bb87a36f69b8f9c3e50caf97a3cf156addad7e8096e2122f7bf2adb4e00eef359cb197c62092f1e2a84fc7388ee401723f04a2f45d6f6d067444b15ba5301b5b38d229938e80949e6b19d3889c21a98a4d8f7432e8cafb1de27865692750323c1d001c6ea292271305ef9252872bf265a7aee", @ANYBLOB="7103ce46b9e96c5fba0fd843825825146765c529491ffc514d67be4a483d239f3bd902b6ab5ba0372bc1abf2845808094dfb3ad13419fbafa287ce77a00be3e489ad9e0b21dec80ec45342e17d092bd219d2a7afe990004c1f391d75b95f9f26082459d57a714df5dc6914134c3ef33f3d7d072f6e4f3b28c4c0a31ca94e1e9e59a6d65240985bc935433245fdca7b5b8128bbe77811942c12eb08dd435758ba8f8e77f364183ca4f7378760f7989a93e9d475ff8b6c5ce0bb", @ANYBLOB="153aa8b4a211257b14de44272efab7dbe2511ad6b602867903cc512fab525132f3d5441bf2433fa36f3db2f58742e617bad18c366e9c14f1d92784dbe158eb59817ec88f81f613e75b5659cad14cd8436115589d881742787adc4f980dd3170dd257516647a2eb06db0ba374fb2be95404b90f61e43dfb91b1a6d46c8cf4c45c96cbf92b8ce119548d0b81d87cb7b57a9bb3a7fe5b23332f4a0e9673bd8043d00d791b856a282b448b5efe496488b698277662fb32"], @ANYRESHEX=r26, @ANYPTR64=&(0x7f0000000780)=ANY=[@ANYPTR64, @ANYRES32=r16, @ANYRESDEC=r27, @ANYRES16=r29, @ANYRES32=r18], @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0]], 0x152, 0x20000000}, 0x21) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r4) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000180)=0x5) r30 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r30, &(0x7f0000000100), 0x18d, 0x4000) ioctl$SIOCX25GCAUSEDIAG(r30, 0x89e6, &(0x7f0000000240)={0xff, 0x7ff}) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 533.042988][T20825] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:56 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) [ 533.141226][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 533.147251][ C0] protocol 88fb is buggy, dev hsr_slave_1 15:36:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 533.225203][T20837] usb usb2: usbfs: process 20837 (syz-executor.4) did not claim interface 7 before use 15:36:56 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:56 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:56 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r13, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r3, r4, r7, r10, r13], 0x6) 15:36:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 533.474587][T20850] usb usb2: usbfs: process 20850 (syz-executor.4) did not claim interface 7 before use [ 533.491585][T20852] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:56 executing program 4: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 533.668473][T20852] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:56 executing program 4: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:56 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) [ 533.777244][T20860] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:56 executing program 4: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:56 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x6, 0xffffffffffffffff, 0x1}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x2, "8b9f545afb01dd3c9c5e1b80f650abbd35583cebbbd4ba06df319950f6c1a20b", 0x5, 0x1000, 0x8, 0x80000001, 0x3f, 0x2, 0x13, 0x81}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x20040, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x73, 0x7d, 0x2, {0x0, 0x6c, 0x6, 0x100000000, {0x8df6edbfad46fd11, 0x4, 0x7}, 0x21000000, 0x200000004000, 0x3, 0x81, 0x12, '/dev/input/mouse#\x00', 0xd, '/dev/video35\x00', 0xd, '/dev\xf9video35\x00', 0xd, '/dev/video35\x00'}}, 0x1f4) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000140)=0xf) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3ff, 0x82281) 15:36:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:57 executing program 4: r0 = syz_open_dev$usb(0x0, 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 534.050088][T20874] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:57 executing program 4: r0 = syz_open_dev$usb(0x0, 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 534.108455][T20880] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) socket$l2tp(0x18, 0x1, 0x1) 15:36:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:57 executing program 4: r0 = syz_open_dev$usb(0x0, 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 534.237616][T20889] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 534.275529][T20889] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 15:36:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:36:57 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 534.401645][T20901] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 534.465867][T20901] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:57 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 15:36:57 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') getsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) bind$isdn_base(r2, &(0x7f0000000140)={0x22, 0xfffffffffffffffd, 0x0, 0x6}, 0x6) preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:57 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 534.792144][T20917] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 534.854280][T20920] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:57 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) ioctl$FS_IOC_FSGETXATTR(r5, 0xc0185500, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7ff0bdbe}) 15:36:58 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 15:36:58 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 15:36:58 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x25c, 0xff, 0x1, 0x0, 0xffffffffffffffff, 0x7ff0bdbe}) 15:36:58 executing program 4: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 535.673408][T20957] vhci_hcd: invalid port number 255 [ 535.678668][T20957] vhci_hcd: default hub control req: 5c02 v0000 i00ff l0 15:36:58 executing program 4: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 15:36:58 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 15:36:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r4 = dup3(r0, r3, 0x100000) r5 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup2(r1, r7) r8 = getpgid(r5) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000140)={{0x0, 0x2, 0x7ff, 0x7f96, 'syz0\x00', 0x9}, 0x6, 0x10000062, 0x6, r8, 0x7, 0x8001, 'syz1\x00', &(0x7f00000000c0)=['cpusetwlan1)[em1cpuset*\x00', ')\x00', '/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00', '\']%!\x00', 'eth1\x00', '\x00'], 0x4f, [], [0x40, 0x7, 0x9, 0x4]}) 15:36:58 executing program 4: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 535.942502][T20971] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) [ 536.038690][T20971] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 536.050460][T20976] __nla_validate_parse: 9 callbacks suppressed [ 536.050469][T20976] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) 15:36:59 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/`ev/bus/usb/00#/00#\x00', 0xdb8, 0x200) fcntl$getown(r0, 0x9) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x7, 0x0, 0x0, 0x7ff0bdbe}) 15:36:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 15:36:59 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x400, 0x8, &(0x7f0000000100)) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:36:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, 0x0) [ 536.276270][T20991] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 536.395367][T20995] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:36:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 536.520582][T21001] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 536.550908][T21005] vhci_hcd: default hub control req: 0000 v0000 i0007 l0 15:36:59 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:36:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:36:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:36:59 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/b\x06\x00\xff\x13\x00\x00\x00\x00\x00\x00\x03\x00\x00\x10\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x7ff0bdbe}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x0, 0x1, 0x20, 0x3, 0x55a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={r6, 0x100000000}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0x7a, &(0x7f00000000c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x100000}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={r6, 0x200000004}, 0x8) 15:36:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x7, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 536.824480][T21014] vhci_hcd: default hub control req: 0000 v0000 i0007 l0 [ 536.854015][T21012] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:36:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x0, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 536.953871][T21020] vhci_hcd: default hub control req: 0000 v0000 i0007 l0 15:36:59 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 537.004230][T21022] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:37:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 537.078591][T21027] usb usb2: usbfs: process 21027 (syz-executor.4) did not claim interface 0 before use [ 537.101625][T21027] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:37:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x9, 0x3, 0x0, 0x7ff0bdbe}) [ 537.195788][T21033] usb usb2: usbfs: process 21033 (syz-executor.4) did not claim interface 0 before use [ 537.234611][T21034] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 537.244025][T21033] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:37:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x9, 0x3, 0x0, 0x7ff0bdbe}) 15:37:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 537.301232][ C0] net_ratelimit: 22 callbacks suppressed [ 537.301240][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 537.312761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 537.318591][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 537.324410][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 537.330264][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 537.336095][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 537.389694][T21039] usb usb2: usbfs: process 21039 (syz-executor.4) did not claim interface 0 before use [ 537.421730][T21039] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 537.429997][T21040] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:37:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x3, 0x0, 0x7ff0bdbe}) [ 537.521744][T21044] usb usb2: usbfs: process 21044 (syz-executor.4) did not claim interface 7 before use 15:37:00 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:37:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:37:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x200000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7ff0bdbe}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x9f}, 0x1, 0x0, 0x0, 0x4000801}, 0x8180) [ 537.731887][T21054] usb usb2: usbfs: process 21054 (syz-executor.4) did not claim interface 7 before use [ 537.774061][T21057] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 537.799816][T21058] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 15:37:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5e, 0x21d, 0x401, 0x0, 0x8, 0x7ff0bdbe}) 15:37:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 537.862380][T21058] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 537.871215][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 537.877041][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 537.882879][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 537.888653][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:37:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x15, 0x10, 0x3, 0x0, 0x144}, 0x3c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) r4 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffffffffffd, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, r5, 0x0, r4, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000340)=0x4) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="98000001cd4e0000000000006100003bb70000100000001815000000", @ANYRES32=r6, @ANYBLOB="0000000000000000fdf904001000000095000000000000009510000000000000850000001400ac2458593c4e46f30000"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x8e, &(0x7f0000000600)=""/142, 0x41f00, 0x1, [], 0x0, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r8, 0xc0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x401, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x4, 0x5}, 0x0, 0x0, &(0x7f0000001140)={0x5, 0x10, 0x4, 0x7}, &(0x7f0000001180)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r7, 0x0, 0x9, &(0x7f0000001300)='cgomners\x00', r9}, 0x69d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x0, 0xe, &(0x7f00000001c0)='memory.events\x00', r9}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x15, &(0x7f0000000100)='wlan0cgroupmime_type\x00', r9}, 0x30) write$P9_RGETLOCK(r3, &(0x7f0000000180)={0x1e, 0x37, 0x1, {0x0, 0x0, 0xffffffffffffffe1, r10}}, 0x1e) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:00 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) [ 537.948674][T21066] vhci_hcd: invalid port number 29 [ 537.964778][T21066] vhci_hcd: default hub control req: 5e00 v0000 i001d l0 [ 537.976408][T21063] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:37:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:37:01 executing program 0: syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x10000) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6559, 0x4400c2) [ 538.130824][T21068] usb usb2: usbfs: process 21068 (syz-executor.4) did not claim interface 0 before use [ 538.154247][T21068] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 538.193184][T21075] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:37:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:37:01 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 538.352243][T21082] FAULT_INJECTION: forcing a failure. [ 538.352243][T21082] name failslab, interval 1, probability 0, space 0, times 0 [ 538.392770][T21082] CPU: 0 PID: 21082 Comm: syz-executor.4 Not tainted 5.3.0 #0 [ 538.400272][T21082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.400279][T21082] Call Trace: [ 538.400302][T21082] dump_stack+0x172/0x1f0 [ 538.400325][T21082] should_fail.cold+0xa/0x15 [ 538.423002][T21082] ? fault_create_debugfs_attr+0x180/0x180 [ 538.428816][T21082] ? lock_downgrade+0x920/0x920 [ 538.433666][T21082] ? ___might_sleep+0x163/0x280 [ 538.433685][T21082] __should_failslab+0x121/0x190 [ 538.433700][T21082] should_failslab+0x9/0x14 [ 538.433716][T21082] __kmalloc+0x2e0/0x770 [ 538.433733][T21082] ? mark_held_locks+0xf0/0xf0 [ 538.451396][T21082] ? _parse_integer+0x190/0x190 [ 538.451410][T21082] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 538.451423][T21082] tomoyo_realpath_from_path+0xcd/0x7b0 [ 538.451443][T21082] ? tomoyo_path_number_perm+0x193/0x520 [ 538.465270][T21082] tomoyo_path_number_perm+0x1dd/0x520 [ 538.482255][T21082] ? tomoyo_path_number_perm+0x193/0x520 [ 538.493339][T21082] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 538.499151][T21082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.499173][T21082] ? ___might_sleep+0x163/0x280 [ 538.511240][T21082] ? selinux_file_mprotect+0x620/0x620 [ 538.516711][T21082] ? __fget+0x384/0x560 [ 538.520880][T21082] ? ksys_dup3+0x3e0/0x3e0 [ 538.520901][T21082] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 538.533074][T21082] ? fput_many+0x12c/0x1a0 [ 538.537528][T21082] tomoyo_file_ioctl+0x23/0x30 15:37:01 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}], 0x1c) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000240)=0xe8) r4 = getegid() r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) fchmod(r5, 0x138) fsetxattr$system_posix_acl(r5, 0x0, &(0x7f0000000680)={{}, {}, [{}], {0x4, 0x1}, [{0x8, 0x1, r4}, {}]}, 0x3c, 0x1) fchown(r0, r3, r4) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x1, 0x38400) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 538.537545][T21082] security_file_ioctl+0x77/0xc0 [ 538.537559][T21082] ksys_ioctl+0x57/0xd0 [ 538.537575][T21082] __x64_sys_ioctl+0x73/0xb0 [ 538.556003][T21082] do_syscall_64+0xfd/0x6a0 [ 538.560518][T21082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 538.566414][T21082] RIP: 0033:0x4598e9 [ 538.570315][T21082] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 538.605887][T21082] RSP: 002b:00007fca37574c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.614740][T21082] RAX: ffffffffffffffda RBX: 00007fca37574c90 RCX: 00000000004598e9 [ 538.622806][T21082] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 538.630784][T21082] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 538.638844][T21082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fca375756d4 [ 538.647276][T21082] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 [ 538.667474][T21082] ERROR: Out of memory at tomoyo_realpath_from_path. [ 538.669057][T21088] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:37:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 538.687674][T21082] usb usb2: usbfs: process 21082 (syz-executor.4) did not claim interface 7 before use [ 538.728429][T21090] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:37:01 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x6c2, 0x70, 0x3ff, 0x0, 0x0, 0x7ff0bdbe}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x89f5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x4, 0x0, 0x3e, 0x0, 0x3ff, 0xadd}) 15:37:01 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:01 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:37:01 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0xc564e83042b4dc82, r0}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r2, 0xc0000, r3}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x444002, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 538.935487][T21099] usb usb2: usbfs: process 21099 (syz-executor.3) did not claim interface 0 before use [ 538.967979][T21099] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 538.976265][T21103] vhci_hcd: invalid port number 112 15:37:01 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7ff0bdbe}) fdatasync(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fdatasync(r4) 15:37:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 539.000408][T21103] vhci_hcd: default hub control req: c206 v0000 i0070 l0 [ 539.048530][T21108] FAULT_INJECTION: forcing a failure. [ 539.048530][T21108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 539.061856][T21108] CPU: 0 PID: 21108 Comm: syz-executor.4 Not tainted 5.3.0 #0 [ 539.069344][T21108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.079405][T21108] Call Trace: [ 539.082721][T21108] dump_stack+0x172/0x1f0 [ 539.087594][T21108] should_fail.cold+0xa/0x15 [ 539.092233][T21108] ? fault_create_debugfs_attr+0x180/0x180 [ 539.098149][T21108] ? lock_downgrade+0x920/0x920 [ 539.103026][T21108] should_fail_alloc_page+0x50/0x60 [ 539.108237][T21108] __alloc_pages_nodemask+0x1a1/0x900 [ 539.113666][T21108] ? __alloc_pages_slowpath+0x2520/0x2520 [ 539.119400][T21108] ? avc_has_extended_perms+0x8e4/0x10f0 [ 539.125039][T21108] ? unwind_get_return_address+0x61/0xa0 [ 539.125053][T21108] ? profile_setup.cold+0xbb/0xbb [ 539.125068][T21108] ? fault_create_debugfs_attr+0x180/0x180 [ 539.125089][T21108] ? lock_downgrade+0x920/0x920 [ 539.135723][T21108] cache_grow_begin+0x90/0xd20 [ 539.135738][T21108] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 539.135754][T21108] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 539.135773][T21108] __kmalloc+0x6b2/0x770 [ 539.146545][T21108] ? mark_held_locks+0xf0/0xf0 [ 539.146562][T21108] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 539.146580][T21108] tomoyo_realpath_from_path+0xcd/0x7b0 [ 539.163293][T21108] ? tomoyo_path_number_perm+0x193/0x520 [ 539.177979][T21108] tomoyo_path_number_perm+0x1dd/0x520 [ 539.177995][T21108] ? tomoyo_path_number_perm+0x193/0x520 [ 539.178010][T21108] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 539.178032][T21108] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.189193][T21108] ? ___might_sleep+0x163/0x280 [ 539.189219][T21108] ? selinux_file_mprotect+0x620/0x620 [ 539.189240][T21108] ? __fget+0x384/0x560 [ 539.206136][T21108] ? ksys_dup3+0x3e0/0x3e0 [ 539.206152][T21108] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.206171][T21108] ? fput_many+0x12c/0x1a0 [ 539.217238][T21108] tomoyo_file_ioctl+0x23/0x30 [ 539.217257][T21108] security_file_ioctl+0x77/0xc0 [ 539.217275][T21108] ksys_ioctl+0x57/0xd0 [ 539.237569][T21108] __x64_sys_ioctl+0x73/0xb0 [ 539.237590][T21108] do_syscall_64+0xfd/0x6a0 [ 539.255978][T21108] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 539.255989][T21108] RIP: 0033:0x4598e9 [ 539.256001][T21108] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.256013][T21108] RSP: 002b:00007fca37574c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.270947][T21108] RAX: ffffffffffffffda RBX: 00007fca37574c90 RCX: 00000000004598e9 [ 539.270954][T21108] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 539.270961][T21108] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 539.270969][T21108] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fca375756d4 [ 539.270976][T21108] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 15:37:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 539.402143][T21108] usb usb2: usbfs: process 21108 (syz-executor.4) did not claim interface 7 before use [ 539.425678][T21103] vhci_hcd: invalid port number 112 [ 539.430927][T21103] vhci_hcd: default hub control req: c206 v0000 i0070 l0 15:37:02 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x84941, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0x27, 0x0, 0x2, 0xf95ab1e40abbfb24, 0x9ce, 0x5, "c318c1f122c54db30544a773c70b66efebc53225ae49a55410771ea0c6f4202468d15367334b68c3532343b5dfae88f9404e119d303b4dac8ecfd083aff5ef", 0x1a}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000140)="eaece8be1db4210fc2e007bc5bc4c8767fb6", 0x12}, {&(0x7f0000000180)="b5bdb6198372c1c0e81bccc8ac1316aae4dc6f474a1b40fb54a6d2c5ac3c348959d5", 0x22}, {&(0x7f00000001c0)="929ea689a9ef27870d40949580ffb67d8902d0e6ddc5215d39630712deae3785f22b2eaf3633b256d40b52b8811912cc0e2d8f42433968e2f6bb2d3db904d27088b3e570976d7b318e29b27ef516ca", 0x4f}, {&(0x7f0000000240)="f854a5f850937fc9169fd6257eaa7c5995d0a4d350d4e35a8b1256259b9646e10e144cd0398bc91cd9d5ed2b0be96a7a3c5c15ff1b4749a366f6f6075f0faba2bcce7d68b277705b304a8e48e4d644e842a0bdac8f2561e2cfed6bb395efc4bf7504e00c424589a5ac4b41add11cfeb78be24d899bde0be251d0c31dc8fccff28a2b0efd9b2a73b31b293652f9c6f149af2ab2deb1faeb833a65b6a6a3f33749f6703b5e3c7a8ebe93b9d77a2c8dd241124c26ac", 0xb4}, {&(0x7f0000000300)="f38ca2bad2fa9d2aacd0b255feee537c05619a94d062886f315103062b259bb1b26addb65faa34ff745a4c5d39e0b8f2919d1b321c4ce7a5948ab0b0434abb5a86429f8db4bb635b9b114710f05c8d409760e629028b4fb094bd866a136b7ebb9dcf292d98933b5022f6668f4c21a153e8b7fb69c71fd7c1073c9d1cddb5c7a0610592536e", 0x85}], 0x5, &(0x7f0000000440)={0x110, 0x3a, 0x1000, "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"}, 0x110, 0x42004800}, 0x4) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x200800000080042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:02 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:02 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000011c0)={0x2, 0x0, [{0x0, 0x1000, &(0x7f00000000c0)=""/4096}, {0x10000, 0xf0, &(0x7f00000010c0)=""/240}]}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 539.629741][T21129] FAULT_INJECTION: forcing a failure. [ 539.629741][T21129] name failslab, interval 1, probability 0, space 0, times 0 [ 539.661920][T21130] usb usb2: usbfs: process 21130 (syz-executor.3) did not claim interface 0 before use [ 539.673623][T21129] CPU: 0 PID: 21129 Comm: syz-executor.4 Not tainted 5.3.0 #0 [ 539.681109][T21129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.691288][T21129] Call Trace: [ 539.694596][T21129] dump_stack+0x172/0x1f0 [ 539.698950][T21129] should_fail.cold+0xa/0x15 [ 539.703554][T21129] ? fault_create_debugfs_attr+0x180/0x180 [ 539.703574][T21129] ? ___might_sleep+0x163/0x280 [ 539.703594][T21129] __should_failslab+0x121/0x190 [ 539.703616][T21129] should_failslab+0x9/0x14 [ 539.723697][T21129] __kmalloc+0x2e0/0x770 [ 539.723716][T21129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.723730][T21129] ? d_absolute_path+0x11b/0x170 [ 539.723740][T21129] ? __d_path+0x140/0x140 [ 539.723752][T21129] ? tomoyo_encode2.part.0+0xf5/0x400 [ 539.723770][T21129] tomoyo_encode2.part.0+0xf5/0x400 [ 539.731165][T21130] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 539.734290][T21129] tomoyo_encode+0x2b/0x50 [ 539.748914][T21129] tomoyo_realpath_from_path+0x1d3/0x7b0 [ 539.761563][T21129] tomoyo_path_number_perm+0x1dd/0x520 [ 539.777028][T21129] ? tomoyo_path_number_perm+0x193/0x520 [ 539.782675][T21129] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 539.788522][T21129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.794786][T21129] ? ___might_sleep+0x163/0x280 [ 539.799665][T21129] ? selinux_file_mprotect+0x620/0x620 [ 539.803842][T21133] usb usb2: usbfs: process 21133 (syz-executor.3) did not claim interface 0 before use [ 539.805133][T21129] ? __fget+0x384/0x560 [ 539.805151][T21129] ? ksys_dup3+0x3e0/0x3e0 [ 539.805173][T21129] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.829904][T21129] ? fput_many+0x12c/0x1a0 [ 539.829921][T21129] tomoyo_file_ioctl+0x23/0x30 [ 539.829940][T21129] security_file_ioctl+0x77/0xc0 [ 539.844012][T21129] ksys_ioctl+0x57/0xd0 [ 539.844025][T21129] __x64_sys_ioctl+0x73/0xb0 [ 539.844046][T21129] do_syscall_64+0xfd/0x6a0 [ 539.857276][T21129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 539.858516][T21133] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 539.863173][T21129] RIP: 0033:0x4598e9 [ 539.874060][T21129] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 539.893837][T21129] RSP: 002b:00007fca37574c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.893852][T21129] RAX: ffffffffffffffda RBX: 00007fca37574c90 RCX: 00000000004598e9 [ 539.893859][T21129] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 539.893866][T21129] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:37:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff233, 0x400000) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) sendto$llc(r1, &(0x7f00000000c0)="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", 0x1000, 0x20004040, &(0x7f0000000040)={0x1a, 0x30d, 0x1000, 0xd3, 0x9f6a, 0x7, @broadcast}, 0x10) 15:37:02 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) [ 539.893873][T21129] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fca375756d4 [ 539.893879][T21129] R13: 00000000004c1fe1 R14: 00000000004d5430 R15: 0000000000000004 [ 539.913290][T21129] ERROR: Out of memory at tomoyo_realpath_from_path. 15:37:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:37:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x0, {0x18, 0x4, 0x7}, 0x100, r2, r3, 0x40, 0x5, 0x8, 0x2, 0x0, 0x400, 0x80, 0x800, 0x1f, 0xfffffffffffffffc, 0x40000000000, 0x7, 0x1, 0x7d0, 0x9}}, 0xa0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x9}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x8) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={r4, 0x5}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000100)={0x9, 0x5, 0x80000000, 0x4, 0xffff}) r5 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r5, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:03 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 540.056948][T21129] usb usb2: usbfs: process 21129 (syz-executor.4) did not claim interface 7 before use 15:37:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000002ac2) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) socket$inet_sctp(0x2, 0x0, 0x84) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) r4 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x1, 0x2}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0x5, 0x4) 15:37:03 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/161, 0xa1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) syz_open_procfs(r1, &(0x7f00000001c0)='net/if_inet6\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 540.175021][T21154] usb usb2: usbfs: process 21154 (syz-executor.3) did not claim interface 0 before use [ 540.200004][T21154] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 540.236195][T21158] usb usb2: usbfs: process 21158 (syz-executor.4) did not claim interface 7 before use 15:37:03 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xb911, 0x200800000000042) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x400, 0x70bd25, 0x25dfdbff, {0xa, 0x8, 0x0, 0x3, r3}, [@IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1040) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x3, 0x176000000000, 0x5, 0x2, 0x0, 0x10001, 0x0, 0x8, 0x1c0000000000000, 0x101, 0x4, 0x8, 0x80000000, 0x200, 0x6, 0x101, 0x7f, 0x1838, 0x3, 0x4, 0x9, 0x86, 0x2000000000000000, 0x6, 0x9738, 0xe6, 0x48f48243, 0x0, 0x5, 0x2, 0x4, 0x10001, 0x7fff, 0xfff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x1018, 0x5, 0x81, 0x7, 0x101, 0x67014ae4, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x3) r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xbdd3, 0x202180) ioctl$RTC_WIE_ON(r4, 0x700f) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 15:37:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 540.517593][T21180] usb usb2: usbfs: process 21180 (syz-executor.4) did not claim interface 7 before use [ 540.567870][T21187] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 540.610566][T21187] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:37:03 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:37:03 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x10000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000001c0)={0x24, 0x80}) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000140)={0x37, 0x8, 0x6, 0x7, 0x80000001}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x3, 0x7ff0bdbe}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) readahead(r4, 0x8, 0xffffffffffff8000) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000000c0)=""/126) r5 = semget$private(0x0, 0x0, 0x0) semtimedop(r5, &(0x7f00000006c0)=[{0x4, 0x5, 0x1000}, {0x4}], 0x2, 0x0) semtimedop(r5, &(0x7f0000000000)=[{0x0, 0x3}], 0x1, 0x0) semctl$GETPID(r5, 0x2, 0xb, &(0x7f0000000180)=""/17) 15:37:03 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x1, &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100)) 15:37:03 executing program 0: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='smi\x00\x00\xe7') preadv(r1, &(0x7f0000000100), 0x100000000000009a, 0x4000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)=0x2) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0185500, &(0x7f0000000000)={0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 15:37:04 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x10, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 541.021056][T21202] usb usb2: usbfs: process 21202 (syz-executor.3) did not claim interface 0 before use 15:37:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x9, 0x80, [], &(0x7f00000000c0)=0x20000000400000}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0xa0001, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/107) [ 541.080513][T21202] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:37:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 15:37:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/desb/00#/00#\x00', 0x6, 0x200800000004042) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) write$binfmt_misc(r3, &(0x7f00000000c0)={'syz1', "59b9544c908547d555ca66e2cb9d56ed0c7ee440d33195441d32fd47bd7fc22baf0224117207cdaf6a1d644f733b21411963ed2eaf5f59cc892eb6cdb296988ad957f30d7bf5c64121ff5fc14f2c0dd4c62d61338e60aeccb205acfa232f14d030e89c319887ad0d681f2e0936e1b6917e9feaa5ab682bbbfc8b05ac00db2bd0b0633f5f7d7bba7e961ecef59a0e70"}, 0x93) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) socket$inet_dccp(0x2, 0x6, 0x0) [ 541.204532][T21216] usb usb2: usbfs: process 21216 (syz-executor.3) did not claim interface 0 before use 15:37:04 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x4b47, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 541.324174][T21216] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 541.366725][T21231] __nla_validate_parse: 8 callbacks suppressed [ 541.366736][T21231] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:37:04 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:37:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8000000000000dae, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) connect$netrom(r0, &(0x7f00000000c0)={{0x3, @null, 0x3}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) 15:37:04 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x4b49, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/de\x88\x1bbb/00#(0#\x00', 0x7048, 0x2e00) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:04 executing program 5 (fault-call:10 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:37:04 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280)='/dev/udmabuf\x00', 0x2) close(r0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x18d, 0x4000) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000040)={0x1, 0x32, 0x100}) r3 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffffffffffd, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000}, r4, 0x0, r3, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="98000001cd4e0000000000006100003bb70000100000001815000000", @ANYRES32=r5, @ANYBLOB="0000000000000000fdf9040010000000950000000000000095000000000000008500000014000000850000004c000000"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x8e, &(0x7f0000000600)=""/142, 0x41f00, 0x1, [], 0x0, 0x5}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r7, 0xc0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=0x401, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x4, 0x5}, 0x0, 0x0, &(0x7f0000001140)={0x5, 0x10, 0x4, 0x7}, &(0x7f0000001180)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r6, 0x0, 0x9, &(0x7f0000001300)='cgomners\x00', r8}, 0x69d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x0, 0xe, &(0x7f00000001c0)='memory.events\x00', r8}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r8, 0x4) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:04 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x4c00, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x4, 0x3, 0x4639, 0x4e, '\x00', 0x5}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 541.908671][T21251] usb usb2: usbfs: process 21251 (syz-executor.3) did not claim interface 0 before use 15:37:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 0x6, 0x7ff0bdbe}) [ 541.960028][T21251] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 542.002572][T21261] usb usb2: usbfs: process 21261 (syz-executor.3) did not claim interface 0 before use [ 542.012593][T21259] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 542.031695][T21267] FAULT_INJECTION: forcing a failure. [ 542.031695][T21267] name failslab, interval 1, probability 0, space 0, times 0 [ 542.042767][T21269] vhci_hcd: default hub control req: 0900 v0000 i0000 l0 [ 542.053064][T21261] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 542.060834][T21267] CPU: 1 PID: 21267 Comm: syz-executor.5 Not tainted 5.3.0 #0 [ 542.068332][T21267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.078395][T21267] Call Trace: [ 542.078421][T21267] dump_stack+0x172/0x1f0 [ 542.078441][T21267] should_fail.cold+0xa/0x15 [ 542.078460][T21267] ? release_sock+0x156/0x1c0 [ 542.095485][T21267] ? fault_create_debugfs_attr+0x180/0x180 [ 542.095502][T21267] ? page_to_nid.part.0+0x20/0x20 [ 542.106539][T21267] ? ___might_sleep+0x163/0x280 [ 542.111439][T21267] __should_failslab+0x121/0x190 [ 542.116384][T21267] should_failslab+0x9/0x14 [ 542.120898][T21267] kmem_cache_alloc_node+0x268/0x740 [ 542.126197][T21267] __alloc_skb+0xd5/0x5e0 [ 542.130552][T21267] ? netdev_alloc_frag+0x1b0/0x1b0 [ 542.135762][T21267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.142011][T21267] ? netlink_autobind.isra.0+0x228/0x310 [ 542.147651][T21267] ? security_socket_getpeersec_dgram+0x8d/0xc0 15:37:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x4c01, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x541b, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 542.153906][T21267] netlink_sendmsg+0x972/0xd60 [ 542.158687][T21267] ? netlink_unicast+0x710/0x710 [ 542.163646][T21267] ? tomoyo_socket_sendmsg+0x26/0x30 [ 542.168946][T21267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.175293][T21267] ? security_socket_sendmsg+0x8d/0xc0 [ 542.180773][T21267] ? netlink_unicast+0x710/0x710 [ 542.185729][T21267] sock_sendmsg+0xd7/0x130 [ 542.190178][T21267] ___sys_sendmsg+0x803/0x920 [ 542.194875][T21267] ? copy_msghdr_from_user+0x440/0x440 [ 542.200346][T21267] ? __fget+0xa3/0x560 [ 542.204440][T21267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.210693][T21267] ? __fget+0x384/0x560 [ 542.214861][T21267] ? ksys_dup3+0x3e0/0x3e0 [ 542.219296][T21267] ? __fget_light+0x1a9/0x230 [ 542.223983][T21267] ? __fdget+0x1b/0x20 [ 542.228094][T21267] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 542.234352][T21267] __sys_sendmsg+0x105/0x1d0 [ 542.238957][T21267] ? __sys_sendmsg_sock+0xd0/0xd0 [ 542.244007][T21267] ? switch_fpu_return+0x1fa/0x4f0 [ 542.249132][T21267] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 542.255214][T21267] __x64_sys_sendmsg+0x78/0xb0 [ 542.259992][T21267] do_syscall_64+0xfd/0x6a0 [ 542.264544][T21267] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 542.270551][T21267] RIP: 0033:0x4598e9 [ 542.274552][T21267] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.294340][T21267] RSP: 002b:00007fb4116c7c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.302772][T21267] RAX: ffffffffffffffda RBX: 00007fb4116c7c90 RCX: 00000000004598e9 [ 542.311623][T21267] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 542.319587][T21267] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 542.327549][T21267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4116c86d4 [ 542.335512][T21267] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000008 15:37:05 executing program 1: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x542f, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x101, @local, 0x65f}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000200)="02d64b2c79afc21f77d996cce6dcbf1f86a7f4285a77255c1525f3872d5526d5", 0x20}, {&(0x7f0000000240)="22479f6b6ed83fe50ac984b35f5784a983a9792c02b8680dc3491ae647123cdd4569d031fa2046eeb7cd49edc31640c804705a799e7d21fd5747e3c9ff5f69b5deb77a238c1d70c0353b54262d224ac0129e9bc799008339f03fc97f833bfd4865f468bb3dcf33e36a15858b8ae98866b5b977909f0d5e5103d9539e1a6c2df532679c6bda8f942f50a6a059324a804a9426779b0dd9b3b4a92aa49e5b6e3c7f85b3bdae1ce9760f62c6b63a9bd4b8ecd0ce64e6e169ad9291c479c6bbf9ca02641a9016612abd7394b17e8aa769f0267ec085ef1c2d28807306", 0xda}, {&(0x7f0000000340)="7e4c308ee057a20374c5cc6990cbc9b708a3d5d39d3d54c4435c4580e77b431b6a44c03dc7821ce1e01d383864ca3f00283c7a42951afee81273398f0de89e8b91f65ded616b9a611719d95c026c0749228229f703d3c799e45f3c64b2005bab2e55a568024aa1c8b87cb4c7ac6e48f0e4b3b3b0ee59286a9a79124a0307575815d0a428a34ba6e0322fb58670c97dba904fdb", 0x93}, {&(0x7f0000000400)="8815e67496c596e9de42a730f39eba3e819b8b6561066fe97d1a2e8b4089afbefc07bd14ff40088f031be2fc2f548f5047ba5c8edde02b51a94127a56986735b27ca32b64d3258297a8b2b6eca8df128ba829fa78756166511d6dcc832ff8c28d2f549139431484c41ef01d98c35", 0x6e}, {&(0x7f0000000480)="0a2e3fb374d1650faab012e0ce3d5f15eedceeeaebf92f90b0c1fd827460aff9c8ae20d432709c253ea37b20bccb7ac9bf78a20da9b597211bc0e24ee656bcf4c1c1990b1aaa44745504c6d0eed59eea4e3d62b0d4dbc48c0a206dafa2a6c6f33e737b2c22417120e253227d00e028a7b7edac04", 0x74}, {&(0x7f0000000500)="44f638bed6fb505ac800aa8083dbceb766afddbf534ea2d04d5f4940f3fea157118ff66d944496d969a95cd42b630f83acf5836f3464f934dcfebc89bca8e939e9dd83e469f704d24a1a777e4a3a952ebd2565a20fcef056ea483e967f1daaabd5e53f6f0b5eee2f98f7fd152062b8e4b364139223840581c8c8e1f0aa61a9b47f7e03d1fa999bf703618a79633ad1a27e8b704b6db2ad66c54ebde3e9dd1870c07ee63097948ceb7bfe65ec50b0a134cb6568adce50d84790627640b298ab37581f08a5e03a4de1dbf47cec36be27403f8b", 0xd2}, {&(0x7f0000000600)="0e6c46d821ea420c11d30bd7f2a13554b04678a15f140acc409fa47b95adf5404ddffb8a369bb8fb139e848d8b26135f4582fc0a87d526e568ad5cd26c32b3016c154e42da74e30f90c46d43f8a53aacb5b93c326579229cf56ba8a033121f6498", 0x61}, {&(0x7f0000000680)="4e089939de646b2eda4a29d837af9afc957b715068173229cd91379458512c3de5938ac94e42ed87d3f60acbb31997371c78f31df0e7276565341a36b3cd76457f6b94dbb64c97265a950631dec2861d542d43f71a4a27ceae0a435ba95798ffc0768aba6ccad5bd61889fa0fd03f52122dc9b", 0x73}], 0x8, &(0x7f0000000780)=[@dontfrag={{0x14, 0x29, 0x3e, 0x81}}], 0x18}}, {{&(0x7f00000007c0)={0xa, 0x4e22, 0xf9b1, @loopback, 0x2}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000800)="e73ba56d631fd72507101d7f0a68304164981c2cc7e05007619db6de76e3b588048203910f5b677e4dfff6c67030553d923069a1", 0x34}], 0x1, &(0x7f0000000880)=[@dstopts={{0x28, 0x29, 0x37, {0x3a, 0x1, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9aa}}], 0x40}}], 0x3, 0x20000040) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x23, 0x80200) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/111) 15:37:05 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80200, 0x0) sendto$x25(r2, &(0x7f0000000100)="cc0f3916818a155fc1b40caa2e1309250690d1d384a3186ba686211fa5c3469f1726f1688b290784e477b7fec006e2305ddd21f4317c6dd7c1346f33691a485bbd143fc9c345ae8522ecbdca9f997ccad3e68d6dd6b1e27f8023f63865791ca9431d476aa780eaf7e78fbc91a7cc356670cc6f618494699ec5a5856e7770ebd36c6493ba2808ce710df9ebae76c76dea383f432c25", 0x95, 0xc008800, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x2, 0x1, 0x8}}, 0x14) 15:37:05 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:37:05 executing program 5 (fault-call:10 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:37:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdbc, 0x2008000001011c0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000040)={'gre0\x00', @ifru_map={0x8001, 0x80000001, 0x2, 0x7fff, 0x0, 0x1}}}) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00') r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x80c1, 0x0) r9 = accept$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000240)={0x8, 0x3, 0x9, 0x0, 0x0, [{r6, 0x0, 0x1f}, {r1, 0x0, 0xd0}, {r7, 0x0, 0x55cb}, {r8, 0x0, 0x7}, {r1, 0x0, 0x4}, {r0, 0x0, 0x5}, {0xffffffffffffffff, 0x0, 0x4}, {r9, 0x0, 0x7ff}, {r0, 0x0, 0x8}]}) [ 542.451993][T21287] usb usb2: usbfs: process 21287 (syz-executor.3) did not claim interface 0 before use [ 542.483750][T21287] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:37:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 542.555306][T21287] usb usb2: usbfs: process 21287 (syz-executor.3) did not claim interface 0 before use [ 542.570208][T21300] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. 15:37:05 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xfffffffffffffffc}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x100000001}, 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 542.596266][T21290] FAULT_INJECTION: forcing a failure. [ 542.596266][T21290] name failslab, interval 1, probability 0, space 0, times 0 [ 542.618213][T21287] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 542.642380][T21290] CPU: 1 PID: 21290 Comm: syz-executor.5 Not tainted 5.3.0 #0 [ 542.649879][T21290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.660200][T21290] Call Trace: [ 542.663485][T21290] dump_stack+0x172/0x1f0 [ 542.667842][T21290] should_fail.cold+0xa/0x15 [ 542.672430][T21290] ? fault_create_debugfs_attr+0x180/0x180 [ 542.678247][T21290] ? page_to_nid.part.0+0x20/0x20 [ 542.683260][T21290] ? ___might_sleep+0x163/0x280 [ 542.688098][T21290] __should_failslab+0x121/0x190 [ 542.693029][T21290] should_failslab+0x9/0x14 [ 542.697529][T21290] kmem_cache_alloc_node_trace+0x274/0x750 [ 542.703446][T21290] ? kasan_unpoison_shadow+0x35/0x50 [ 542.708713][T21290] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 542.714502][T21290] __kmalloc_node_track_caller+0x3d/0x70 [ 542.720127][T21290] __kmalloc_reserve.isra.0+0x40/0xf0 [ 542.725482][T21290] __alloc_skb+0x10b/0x5e0 [ 542.729891][T21290] ? netdev_alloc_frag+0x1b0/0x1b0 [ 542.734987][T21290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.741387][T21290] ? netlink_autobind.isra.0+0x228/0x310 [ 542.747008][T21290] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 542.753237][T21290] netlink_sendmsg+0x972/0xd60 [ 542.757988][T21290] ? netlink_unicast+0x710/0x710 [ 542.762909][T21290] ? tomoyo_socket_sendmsg+0x26/0x30 [ 542.768194][T21290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.774503][T21290] ? security_socket_sendmsg+0x8d/0xc0 [ 542.779945][T21290] ? netlink_unicast+0x710/0x710 [ 542.784872][T21290] sock_sendmsg+0xd7/0x130 [ 542.789272][T21290] ___sys_sendmsg+0x803/0x920 [ 542.793932][T21290] ? copy_msghdr_from_user+0x440/0x440 [ 542.799384][T21290] ? __fget+0xa3/0x560 [ 542.803442][T21290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 542.809673][T21290] ? __fget+0x384/0x560 [ 542.813815][T21290] ? ksys_dup3+0x3e0/0x3e0 [ 542.818577][T21290] ? __fget_light+0x1a9/0x230 [ 542.823234][T21290] ? __fdget+0x1b/0x20 [ 542.827290][T21290] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 542.833531][T21290] __sys_sendmsg+0x105/0x1d0 [ 542.839074][T21290] ? __sys_sendmsg_sock+0xd0/0xd0 [ 542.844098][T21290] ? switch_fpu_return+0x1fa/0x4f0 [ 542.849371][T21290] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 542.855511][T21290] __x64_sys_sendmsg+0x78/0xb0 [ 542.860273][T21290] do_syscall_64+0xfd/0x6a0 [ 542.864779][T21290] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 542.870650][T21290] RIP: 0033:0x4598e9 [ 542.874531][T21290] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.894309][T21290] RSP: 002b:00007fb411709c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.902705][T21290] RAX: ffffffffffffffda RBX: 00007fb411709c90 RCX: 00000000004598e9 [ 542.910669][T21290] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 542.918718][T21290] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 542.926672][T21290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb41170a6d4 [ 542.934627][T21290] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000008 15:37:05 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x5451, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:05 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd", 0x0, 0x100}, 0x28) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000100)=""/210) [ 542.951546][T21308] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 15:37:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x2) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:06 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x2, 0x0, [{0x80000000}, {0x1}]}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 543.155438][T21319] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 543.172608][T21324] usb usb2: usbfs: process 21324 (syz-executor.3) did not claim interface 0 before use [ 543.192043][T21324] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:37:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x47f39d685325fe42) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 543.311304][T21324] usb usb2: usbfs: process 21324 (syz-executor.3) did not claim interface 0 before use [ 543.344065][T21324] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:37:06 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:37:06 executing program 5 (fault-call:10 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:37:06 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x800, 0x0) write$rfkill(r0, &(0x7f00000000c0)={0x3, 0x5, 0x1, 0x1}, 0x8) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/\x7f\x00\x00\x00bus/usb/0\x00\x00/00#\x00', 0xdb5, 0x200800000000042) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x2, 0x0, 0x3, 0x3ff, 'syz0\x00', 0x4ec3f08f}, 0x0, 0x180, 0x3, r2, 0x4, 0x8, 'syz0\x00', &(0x7f0000000200)=['GPLvmnet1\x00', '/proc/capi/capi20ncci\x00', 'selftrustedem0)@\x00', '/dev/kvm\x00'], 0x3a, [], [0xc61f, 0x4, 0x1000, 0x101]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0185500, &(0x7f0000000140)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x557801, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f00000000c0)={0x7, 0x1, 0x7, 0xf0, 0x7fff, 0x40}) 15:37:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:06 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/u00#\x00', 0x30a, 0xc2200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f00000000c0)=0x2, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x5, 0x2, 0x10000006c, 0x7ff0bdbe}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x1, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000040)=0x8) [ 543.510484][T21343] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 543.541219][ C0] net_ratelimit: 20 callbacks suppressed [ 543.541227][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 543.552699][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 543.553711][T21356] FAULT_INJECTION: forcing a failure. [ 543.553711][T21356] name failslab, interval 1, probability 0, space 0, times 0 [ 543.558491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 543.576851][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 543.582685][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 543.583741][T21356] CPU: 1 PID: 21356 Comm: syz-executor.5 Not tainted 5.3.0 #0 [ 543.588463][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 543.595858][T21356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.595863][T21356] Call Trace: [ 543.595886][T21356] dump_stack+0x172/0x1f0 [ 543.595911][T21356] should_fail.cold+0xa/0x15 [ 543.623955][T21356] ? fault_create_debugfs_attr+0x180/0x180 [ 543.629776][T21356] ? netlink_remove_tap+0x4d0/0x4d0 [ 543.634995][T21356] __should_failslab+0x121/0x190 [ 543.639942][T21356] should_failslab+0x9/0x14 [ 543.644446][T21356] kmem_cache_alloc+0x47/0x710 [ 543.649219][T21356] ? lock_acquire+0x190/0x410 [ 543.653899][T21356] ? netlink_deliver_tap+0x146/0xbf0 15:37:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:06 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40600) ioctl$RTC_PIE_ON(r1, 0x7005) [ 543.659195][T21356] skb_clone+0x154/0x3d0 [ 543.663452][T21356] netlink_deliver_tap+0x94d/0xbf0 [ 543.668582][T21356] netlink_unicast+0x5a2/0x710 [ 543.673446][T21356] ? netlink_attachskb+0x7c0/0x7c0 [ 543.678584][T21356] ? _copy_from_iter_full+0x25d/0x8a0 [ 543.684049][T21356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.684065][T21356] netlink_sendmsg+0x8a5/0xd60 [ 543.684082][T21356] ? netlink_unicast+0x710/0x710 [ 543.695175][T21356] ? tomoyo_socket_sendmsg+0x26/0x30 15:37:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 543.695189][T21356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.695200][T21356] ? security_socket_sendmsg+0x8d/0xc0 [ 543.695217][T21356] ? netlink_unicast+0x710/0x710 [ 543.722866][T21356] sock_sendmsg+0xd7/0x130 [ 543.727298][T21356] ___sys_sendmsg+0x803/0x920 [ 543.731983][T21356] ? copy_msghdr_from_user+0x440/0x440 [ 543.737609][T21356] ? __fget+0xa3/0x560 [ 543.741688][T21356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.747959][T21356] ? __fget+0x384/0x560 [ 543.752132][T21356] ? ksys_dup3+0x3e0/0x3e0 [ 543.756581][T21356] ? __fget_light+0x1a9/0x230 15:37:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x6364, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 543.761281][T21356] ? __fdget+0x1b/0x20 [ 543.765363][T21356] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 543.771625][T21356] __sys_sendmsg+0x105/0x1d0 [ 543.776239][T21356] ? __sys_sendmsg_sock+0xd0/0xd0 [ 543.781282][T21356] ? switch_fpu_return+0x1fa/0x4f0 [ 543.786398][T21356] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 543.792473][T21356] __x64_sys_sendmsg+0x78/0xb0 [ 543.797253][T21356] do_syscall_64+0xfd/0x6a0 [ 543.802294][T21356] entry_SYSCALL_64_after_hwframe+0x49/0xbe 15:37:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8912, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 543.808232][T21356] RIP: 0033:0x4598e9 [ 543.812137][T21356] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 543.831782][T21356] RSP: 002b:00007fb4116e8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.840286][T21356] RAX: ffffffffffffffda RBX: 00007fb4116e8c90 RCX: 00000000004598e9 [ 543.848279][T21356] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 15:37:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8933, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 543.856255][T21356] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 543.864236][T21356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4116e96d4 [ 543.872254][T21356] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000008 15:37:07 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:37:07 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x80) 15:37:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x18d, 0x4000) 15:37:07 executing program 5 (fault-call:10 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:37:07 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0x8990, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:07 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0xfffffffffffffffc, 0x4, 0x1, 0x7ff0bdbe}) [ 544.101273][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 544.107061][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 544.112901][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 544.193318][T21387] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 544.213394][T21389] usb usb2: usbfs: process 21389 (syz-executor.3) did not claim interface 0 before use 15:37:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/3}], 0x272cd4f56dd2648, 0x4c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:07 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xae01, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:07 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x4e22, @remote}}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)=ANY=[]) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) [ 544.244943][T21389] vhci_hcd: default hub control req: a100 v0000 i0000 l0 15:37:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x518, 0xc0, 0x0, 0x288, 0x0, 0x348, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x40}}}, {{@uncond, 0x0, 0x98, 0xe0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', 0x1bce}}}, {{@ip={@remote, @loopback, 0x0, 0xff, 'veth1\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x4}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x9e52a6331ba40aac}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @multicast2, 0xffffffff, 0xdd1e486e9c8c5543, 'gretap0\x00', 'bond_slave_1\x00', {}, {0x7f}, 0x6c, 0x2, 0x30}, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x2b}, 0xff000000, 0xff000000, 'nlmon0\x00', 'erspan0\x00', {}, {0xff}, 0x8, 0x1}, 0x0, 0x110, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x9}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x401, 0x6, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0xebf, 0x3ff}, {0x4, 0x6, 0x3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x578) connect$rxrpc(r0, &(0x7f0000000780)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x6, 0x1ff, @rand_addr="588a338ec8cbd61421319c9ab94099bb", 0x2e8}}, 0x24) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x7ff0bdbe}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000006c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x22002, 0x0) [ 544.303766][T21397] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 544.356281][T21388] FAULT_INJECTION: forcing a failure. [ 544.356281][T21388] name failslab, interval 1, probability 0, space 0, times 0 [ 544.368960][T21388] CPU: 1 PID: 21388 Comm: syz-executor.5 Not tainted 5.3.0 #0 [ 544.376425][T21388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 544.386493][T21388] Call Trace: [ 544.389805][T21388] dump_stack+0x172/0x1f0 [ 544.394267][T21388] should_fail.cold+0xa/0x15 [ 544.398962][T21388] ? fault_create_debugfs_attr+0x180/0x180 [ 544.404790][T21388] __should_failslab+0x121/0x190 [ 544.409755][T21388] should_failslab+0x9/0x14 [ 544.414255][T21388] kmem_cache_alloc+0x47/0x710 [ 544.419204][T21388] ? lock_acquire+0x190/0x410 [ 544.423871][T21388] ? napi_disable+0xe0/0xe0 [ 544.428365][T21388] skb_clone+0x154/0x3d0 [ 544.432605][T21388] dev_queue_xmit_nit+0x342/0x990 [ 544.437637][T21388] ? validate_xmit_xfrm+0x43c/0xf10 [ 544.442824][T21388] dev_hard_start_xmit+0xbb/0x9c0 [ 544.447833][T21388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.454142][T21388] __dev_queue_xmit+0x2b15/0x3650 [ 544.459148][T21388] ? __netlink_lookup+0x3fa/0x7b0 [ 544.464242][T21388] ? __kasan_check_read+0x11/0x20 [ 544.469257][T21388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.475482][T21388] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 544.480751][T21388] ? __copy_skb_header+0x250/0x550 [ 544.487061][T21388] ? __skb_checksum_complete+0x3f0/0x3f0 [ 544.492689][T21388] ? __kasan_check_write+0x14/0x20 [ 544.497868][T21388] ? __skb_clone+0x5c8/0x820 [ 544.502539][T21388] dev_queue_xmit+0x18/0x20 [ 544.507025][T21388] ? dev_queue_xmit+0x18/0x20 [ 544.511683][T21388] netlink_deliver_tap+0x8e2/0xbf0 [ 544.516789][T21388] netlink_unicast+0x5a2/0x710 [ 544.521550][T21388] ? netlink_attachskb+0x7c0/0x7c0 [ 544.526650][T21388] ? _copy_from_iter_full+0x25d/0x8a0 [ 544.532005][T21388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.539096][T21388] netlink_sendmsg+0x8a5/0xd60 [ 544.543847][T21388] ? netlink_unicast+0x710/0x710 [ 544.548768][T21388] ? tomoyo_socket_sendmsg+0x26/0x30 [ 544.554033][T21388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.560262][T21388] ? security_socket_sendmsg+0x8d/0xc0 [ 544.565714][T21388] ? netlink_unicast+0x710/0x710 [ 544.570636][T21388] sock_sendmsg+0xd7/0x130 [ 544.575041][T21388] ___sys_sendmsg+0x803/0x920 [ 544.579705][T21388] ? copy_msghdr_from_user+0x440/0x440 [ 544.585150][T21388] ? __fget+0xa3/0x560 [ 544.589201][T21388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 544.595424][T21388] ? __fget+0x384/0x560 [ 544.599560][T21388] ? ksys_dup3+0x3e0/0x3e0 [ 544.603961][T21388] ? __fget_light+0x1a9/0x230 [ 544.608623][T21388] ? __fdget+0x1b/0x20 [ 544.612681][T21388] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 544.618906][T21388] __sys_sendmsg+0x105/0x1d0 [ 544.623480][T21388] ? __sys_sendmsg_sock+0xd0/0xd0 [ 544.628494][T21388] ? switch_fpu_return+0x1fa/0x4f0 [ 544.633593][T21388] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 544.639662][T21388] __x64_sys_sendmsg+0x78/0xb0 [ 544.644428][T21388] do_syscall_64+0xfd/0x6a0 [ 544.648914][T21388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 544.654789][T21388] RIP: 0033:0x4598e9 [ 544.658680][T21388] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 544.678263][T21388] RSP: 002b:00007fb411709c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.686653][T21388] RAX: ffffffffffffffda RBX: 00007fb411709c90 RCX: 00000000004598e9 [ 544.694609][T21388] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 544.702931][T21388] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 544.710883][T21388] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb41170a6d4 [ 544.718837][T21388] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000008 [ 544.731277][ C0] protocol 88fb is buggy, dev hsr_slave_0 15:37:07 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xae41, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) [ 544.751258][T21408] usb usb2: usbfs: process 21408 (syz-executor.3) did not claim interface 0 before use 15:37:07 executing program 5 (fault-call:10 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 544.815608][T21408] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 544.828752][T21415] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 544.899572][T21408] usb usb2: usbfs: process 21408 (syz-executor.3) did not claim interface 0 before use [ 544.934257][T21408] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 544.957292][T21419] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 544.975054][T21419] FAULT_INJECTION: forcing a failure. [ 544.975054][T21419] name failslab, interval 1, probability 0, space 0, times 0 [ 544.989786][T21419] CPU: 1 PID: 21419 Comm: syz-executor.5 Not tainted 5.3.0 #0 [ 544.997271][T21419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.008185][T21419] Call Trace: [ 545.008211][T21419] dump_stack+0x172/0x1f0 [ 545.008231][T21419] should_fail.cold+0xa/0x15 [ 545.008244][T21419] ? avc_has_extended_perms+0x10f0/0x10f0 [ 545.008263][T21419] ? fault_create_debugfs_attr+0x180/0x180 [ 545.035780][T21419] ? page_to_nid.part.0+0x20/0x20 [ 545.040795][T21419] ? ___might_sleep+0x163/0x280 [ 545.045823][T21419] __should_failslab+0x121/0x190 [ 545.050863][T21419] should_failslab+0x9/0x14 [ 545.055372][T21419] kmem_cache_alloc_node_trace+0x274/0x750 [ 545.055386][T21419] ? selinux_sb_eat_lsm_opts+0x700/0x700 [ 545.055406][T21419] ? lock_downgrade+0x920/0x920 [ 545.068766][T21419] __kmalloc_node+0x3d/0x70 [ 545.068782][T21419] qdisc_alloc+0xbb/0xa90 [ 545.068800][T21419] ? do_raw_read_unlock+0x3f/0x70 [ 545.087628][T21419] ? _raw_read_unlock+0x2d/0x50 [ 545.092469][T21419] qdisc_create+0xec/0x1210 [ 545.096956][T21419] ? nla_memcpy+0xb0/0xb0 [ 545.101268][T21419] ? tc_get_qdisc+0xc10/0xc10 [ 545.105943][T21419] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.112162][T21419] ? qdisc_match_from_root+0x18a/0x280 [ 545.117602][T21419] tc_modify_qdisc+0x524/0x1c50 [ 545.122437][T21419] ? qdisc_create+0x1210/0x1210 [ 545.127275][T21419] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 545.132369][T21419] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.138589][T21419] ? qdisc_create+0x1210/0x1210 [ 545.143423][T21419] rtnetlink_rcv_msg+0x463/0xb00 [ 545.148345][T21419] ? rtnetlink_put_metrics+0x580/0x580 [ 545.153798][T21419] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 545.160020][T21419] ? __copy_skb_header+0x250/0x550 [ 545.165130][T21419] netlink_rcv_skb+0x177/0x450 [ 545.169880][T21419] ? rtnetlink_put_metrics+0x580/0x580 [ 545.175332][T21419] ? netlink_ack+0xb30/0xb30 [ 545.179999][T21419] ? netlink_deliver_tap+0x254/0xbf0 [ 545.185353][T21419] rtnetlink_rcv+0x1d/0x30 [ 545.189786][T21419] netlink_unicast+0x531/0x710 [ 545.194539][T21419] ? netlink_attachskb+0x7c0/0x7c0 [ 545.199651][T21419] ? _copy_from_iter_full+0x25d/0x8a0 [ 545.205020][T21419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.211515][T21419] netlink_sendmsg+0x8a5/0xd60 [ 545.216371][T21419] ? netlink_unicast+0x710/0x710 [ 545.221300][T21419] ? tomoyo_socket_sendmsg+0x26/0x30 [ 545.226566][T21419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.232783][T21419] ? security_socket_sendmsg+0x8d/0xc0 [ 545.238220][T21419] ? netlink_unicast+0x710/0x710 [ 545.243142][T21419] sock_sendmsg+0xd7/0x130 [ 545.247541][T21419] ___sys_sendmsg+0x803/0x920 [ 545.252210][T21419] ? copy_msghdr_from_user+0x440/0x440 [ 545.257652][T21419] ? __fget+0xa3/0x560 [ 545.261705][T21419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.267924][T21419] ? __fget+0x384/0x560 [ 545.272289][T21419] ? ksys_dup3+0x3e0/0x3e0 [ 545.276823][T21419] ? __fget_light+0x1a9/0x230 [ 545.281489][T21419] ? __fdget+0x1b/0x20 [ 545.285645][T21419] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.291973][T21419] __sys_sendmsg+0x105/0x1d0 [ 545.296545][T21419] ? __sys_sendmsg_sock+0xd0/0xd0 [ 545.301581][T21419] ? switch_fpu_return+0x1fa/0x4f0 [ 545.306699][T21419] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 545.312767][T21419] __x64_sys_sendmsg+0x78/0xb0 [ 545.317516][T21419] do_syscall_64+0xfd/0x6a0 [ 545.322003][T21419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 545.328111][T21419] RIP: 0033:0x4598e9 [ 545.331995][T21419] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 545.351800][T21419] RSP: 002b:00007fb411709c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.360200][T21419] RAX: ffffffffffffffda RBX: 00007fb411709c90 RCX: 00000000004598e9 [ 545.368170][T21419] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 545.376125][T21419] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 545.384077][T21419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb41170a6d4 [ 545.392029][T21419] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000008 15:37:08 executing program 2: socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) recvmsg$kcm(r0, &(0x7f00000098c0)={&(0x7f0000009800)=@can, 0x80, 0x0}, 0x0) 15:37:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) fcntl$setstatus(r0, 0x4, 0x40c00) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="3f0050000229198de4640ec60edf1eb5cf4533c7d30cda36a90212532f922bf84958b8330c2a945010ca8230372706aa4a980fcd5ac5966649eb97f997c569daa015c7fe875c76ceeb720a89363c0bfa92b9adbc"], 0x58) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:08 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xae60, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:08 executing program 0: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000100), 0x18d, 0x4000) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5c1, 0xffff, 0xfff, 0xfff}, {0x7, 0x62d, 0x8, 0x40}]}) 15:37:08 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000140)={0x9, 0x80000000, [0x6, 0x2, 0x1, 0x1, 0x40], 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4840, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x200000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r8 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000db8, 0x200800000000042) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f00000000c0)={0x46}) ioctl$FS_IOC_FSGETXATTR(r8, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:08 executing program 5 (fault-call:10 fault-nth:5): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0xfffffffffffffd0b, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 15:37:08 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x40040, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000200)=""/192) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000140)) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$netrom(r2, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) 15:37:08 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xae80, &(0x7f0000000000)={0xa1, 0x7, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/u\x8cb/00#/00#\x00', 0x401, 0x200800000000042) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) 15:37:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100002, 0x0, 0x0, 0x7b01, 0x7ff0bdbe}) [ 545.632662][T21445] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 545.708508][T21437] FAULT_INJECTION: forcing a failure. [ 545.708508][T21437] name failslab, interval 1, probability 0, space 0, times 0 [ 545.751767][T21437] CPU: 1 PID: 21437 Comm: syz-executor.5 Not tainted 5.3.0 #0 [ 545.759318][T21437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.769379][T21437] Call Trace: [ 545.772684][T21437] dump_stack+0x172/0x1f0 [ 545.777039][T21437] should_fail.cold+0xa/0x15 [ 545.781647][T21437] ? qdisc_alloc+0xbb/0xa90 [ 545.786173][T21437] ? fault_create_debugfs_attr+0x180/0x180 [ 545.791996][T21437] ? page_to_nid.part.0+0x20/0x20 [ 545.797119][T21437] ? ___might_sleep+0x163/0x280 [ 545.802052][T21437] __should_failslab+0x121/0x190 [ 545.807090][T21437] should_failslab+0x9/0x14 [ 545.811591][T21437] kmem_cache_alloc_trace+0x2d3/0x790 [ 545.816945][T21437] ? fault_create_debugfs_attr+0x180/0x180 [ 545.822731][T21437] ? page_to_nid.part.0+0x20/0x20 [ 545.827740][T21437] tcf_block_get_ext+0x882/0x1610 [ 545.832762][T21437] tcf_block_get+0xb9/0x100 [ 545.837247][T21437] ? tcf_block_get_ext+0x1610/0x1610 [ 545.842520][T21437] ? walker_check_empty+0x70/0x70 [ 545.847702][T21437] ? lockdep_init_map+0x1be/0x6d0 [ 545.852709][T21437] ? dsmark_dump.cold+0x40/0x40 [ 545.857639][T21437] ? __kasan_check_write+0x14/0x20 [ 545.862817][T21437] sfb_init+0x36/0xa7 [ 545.866791][T21437] ? sfb_change+0xe90/0xe90 [ 545.871275][T21437] qdisc_create+0x4ee/0x1210 [ 545.875848][T21437] ? tc_get_qdisc+0xc10/0xc10 [ 545.880510][T21437] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.886732][T21437] ? qdisc_match_from_root+0x18a/0x280 [ 545.892173][T21437] tc_modify_qdisc+0x524/0x1c50 [ 545.897015][T21437] ? qdisc_create+0x1210/0x1210 [ 545.901866][T21437] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 545.906959][T21437] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 545.913178][T21437] ? qdisc_create+0x1210/0x1210 [ 545.918011][T21437] rtnetlink_rcv_msg+0x463/0xb00 [ 545.923033][T21437] ? rtnetlink_put_metrics+0x580/0x580 [ 545.928577][T21437] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 545.933843][T21437] ? __copy_skb_header+0x250/0x550 [ 545.938940][T21437] netlink_rcv_skb+0x177/0x450 [ 545.943776][T21437] ? rtnetlink_put_metrics+0x580/0x580 [ 545.949218][T21437] ? netlink_ack+0xb30/0xb30 [ 545.953793][T21437] ? netlink_deliver_tap+0x254/0xbf0 [ 545.959061][T21437] rtnetlink_rcv+0x1d/0x30 [ 545.963556][T21437] netlink_unicast+0x531/0x710 [ 545.968303][T21437] ? netlink_attachskb+0x7c0/0x7c0 [ 545.973407][T21437] ? _copy_from_iter_full+0x25d/0x8a0 [ 545.978770][T21437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 545.984994][T21437] netlink_sendmsg+0x8a5/0xd60 [ 545.989765][T21437] ? netlink_unicast+0x710/0x710 [ 545.994709][T21437] ? tomoyo_socket_sendmsg+0x26/0x30 [ 545.999993][T21437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.006222][T21437] ? security_socket_sendmsg+0x8d/0xc0 [ 546.011724][T21437] ? netlink_unicast+0x710/0x710 [ 546.016657][T21437] sock_sendmsg+0xd7/0x130 [ 546.021070][T21437] ___sys_sendmsg+0x803/0x920 [ 546.025854][T21437] ? copy_msghdr_from_user+0x440/0x440 [ 546.031302][T21437] ? __fget+0xa3/0x560 [ 546.035355][T21437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.041579][T21437] ? __fget+0x384/0x560 [ 546.045720][T21437] ? ksys_dup3+0x3e0/0x3e0 [ 546.050128][T21437] ? __fget_light+0x1a9/0x230 [ 546.054791][T21437] ? __fdget+0x1b/0x20 [ 546.058846][T21437] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 546.065073][T21437] __sys_sendmsg+0x105/0x1d0 [ 546.069646][T21437] ? __sys_sendmsg_sock+0xd0/0xd0 [ 546.074664][T21437] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 546.080822][T21437] __x64_sys_sendmsg+0x78/0xb0 [ 546.085571][T21437] do_syscall_64+0xfd/0x6a0 [ 546.090066][T21437] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 546.095936][T21437] RIP: 0033:0x4598e9 [ 546.099815][T21437] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 546.119920][T21437] RSP: 002b:00007fb411709c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.128366][T21437] RAX: ffffffffffffffda RBX: 00007fb411709c90 RCX: 00000000004598e9 [ 546.136669][T21437] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 546.144621][T21437] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:37:09 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x0, 0x0, 0x7ff0bdbe}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x8000) 15:37:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xdb8, 0x200800000000042) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x69d, 0x88100) [ 546.152581][T21437] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb41170a6d4 [ 546.160616][T21437] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000008 [ 546.194512][T21460] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 546.215441][T21460] vhci_hcd: default hub control req: 5c00 v0000 i0000 l0 [ 546.296109][T21437] kasan: CONFIG_KASAN_INLINE enabled [ 546.313625][T21437] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 546.324822][T21437] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 546.329373][ T3905] kobject: 'loop1' (0000000094a24a94): kobject_uevent_env [ 546.331801][T21437] CPU: 1 PID: 21437 Comm: syz-executor.5 Not tainted 5.3.0 #0 [ 546.331808][T21437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.331829][T21437] RIP: 0010:qdisc_put+0x25/0x90 [ 546.331843][T21437] Code: 00 00 00 00 00 55 48 89 e5 41 54 49 89 fc 53 e8 81 2f bf fb 49 8d 7c 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 54 41 8b 5c 24 10 31 ff 83 e3 01 [ 546.331850][T21437] RSP: 0018:ffff888051b07488 EFLAGS: 00010202 [ 546.331862][T21437] RAX: dffffc0000000000 RBX: ffff88805a84ecc0 RCX: ffffc900109de000 [ 546.331870][T21437] RDX: 0000000000000002 RSI: ffffffff85b3557f RDI: 0000000000000010 [ 546.331878][T21437] RBP: ffff888051b07498 R08: ffff88805391a080 R09: fffffbfff11cae5f [ 546.331885][T21437] R10: fffffbfff11cae5e R11: ffffffff88e572f3 R12: 0000000000000000 [ 546.331893][T21437] R13: ffff88805a84ecc0 R14: ffff88805b64a100 R15: ffff88805a84ecfc [ 546.331905][T21437] FS: 00007fb41170a700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 546.331912][T21437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.331918][T21437] CR2: 000000000153f3c0 CR3: 00000000a9af4000 CR4: 00000000001426e0 [ 546.331931][T21437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.354386][ T3905] kobject: 'loop1' (0000000094a24a94): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 546.356625][T21437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.356631][T21437] Call Trace: [ 546.356649][T21437] sfb_destroy+0x61/0x80 [ 546.356671][T21437] ? sfb_zero_all_buckets+0x20/0x20 [ 546.381726][T21435] kobject: 'kvm' (00000000aa445aff): kobject_uevent_env [ 546.387196][T21437] qdisc_create+0xbc6/0x1210 [ 546.387212][T21437] ? tc_get_qdisc+0xc10/0xc10 [ 546.387233][T21437] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 546.395936][T21435] kobject: 'kvm' (00000000aa445aff): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 546.403329][T21437] ? qdisc_match_from_root+0x18a/0x280 [ 546.403345][T21437] tc_modify_qdisc+0x524/0x1c50 [ 546.403362][T21437] ? qdisc_create+0x1210/0x1210 [ 546.403383][T21437] ? rtnetlink_rcv_msg+0x1ea/0xb00 [ 546.403404][T21437] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 546.548212][T21437] ? qdisc_create+0x1210/0x1210 [ 546.553051][T21437] rtnetlink_rcv_msg+0x463/0xb00 [ 546.557974][T21437] ? rtnetlink_put_metrics+0x580/0x580 [ 546.563426][T21437] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 546.568695][T21437] ? __copy_skb_header+0x250/0x550 [ 546.573799][T21437] netlink_rcv_skb+0x177/0x450 [ 546.578633][T21437] ? rtnetlink_put_metrics+0x580/0x580 [ 546.584077][T21437] ? netlink_ack+0xb30/0xb30 [ 546.588943][T21437] ? netlink_deliver_tap+0x254/0xbf0 [ 546.594651][T21437] rtnetlink_rcv+0x1d/0x30 [ 546.599055][T21437] netlink_unicast+0x531/0x710 [ 546.603815][T21437] ? netlink_attachskb+0x7c0/0x7c0 [ 546.608996][T21437] ? _copy_from_iter_full+0x25d/0x8a0 [ 546.614534][T21437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.620762][T21437] netlink_sendmsg+0x8a5/0xd60 [ 546.625965][T21437] ? netlink_unicast+0x710/0x710 [ 546.630896][T21437] ? tomoyo_socket_sendmsg+0x26/0x30 [ 546.636177][T21437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.642573][T21437] ? security_socket_sendmsg+0x8d/0xc0 [ 546.648017][T21437] ? netlink_unicast+0x710/0x710 [ 546.652950][T21437] sock_sendmsg+0xd7/0x130 [ 546.657436][T21437] ___sys_sendmsg+0x803/0x920 [ 546.662099][T21437] ? copy_msghdr_from_user+0x440/0x440 [ 546.667544][T21437] ? __fget+0xa3/0x560 [ 546.671613][T21437] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 546.677835][T21437] ? __fget+0x384/0x560 [ 546.682182][T21437] ? ksys_dup3+0x3e0/0x3e0 [ 546.686596][T21437] ? __fget_light+0x1a9/0x230 [ 546.691280][T21437] ? __fdget+0x1b/0x20 [ 546.695333][T21437] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 546.701577][T21437] __sys_sendmsg+0x105/0x1d0 [ 546.706151][T21437] ? __sys_sendmsg_sock+0xd0/0xd0 [ 546.711175][T21437] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 546.717244][T21437] __x64_sys_sendmsg+0x78/0xb0 [ 546.721993][T21437] do_syscall_64+0xfd/0x6a0 [ 546.726484][T21437] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 546.732360][T21437] RIP: 0033:0x4598e9 [ 546.736239][T21437] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 546.755824][T21437] RSP: 002b:00007fb411709c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.764218][T21437] RAX: ffffffffffffffda RBX: 00007fb411709c90 RCX: 00000000004598e9 [ 546.772184][T21437] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 546.780141][T21437] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 546.788119][T21437] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb41170a6d4 [ 546.796085][T21437] R13: 00000000004c77fb R14: 00000000004dd098 R15: 0000000000000008 [ 546.804041][T21437] Modules linked in: [ 546.825246][T21437] ---[ end trace 1ea99a2a530ad987 ]--- [ 546.830763][T21437] RIP: 0010:qdisc_put+0x25/0x90 [ 546.839737][T21437] Code: 00 00 00 00 00 55 48 89 e5 41 54 49 89 fc 53 e8 81 2f bf fb 49 8d 7c 24 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 54 41 8b 5c 24 10 31 ff 83 e3 01 [ 546.853702][ T3905] kobject: 'loop3' (000000003f0f1f49): kobject_uevent_env [ 546.867859][T21437] RSP: 0018:ffff888051b07488 EFLAGS: 00010202 [ 546.870819][ T3905] kobject: 'loop3' (000000003f0f1f49): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 546.882667][T21437] RAX: dffffc0000000000 RBX: ffff88805a84ecc0 RCX: ffffc900109de000 [ 546.892862][T21437] RDX: 0000000000000002 RSI: ffffffff85b3557f RDI: 0000000000000010 [ 546.900855][T21437] RBP: ffff888051b07498 R08: ffff88805391a080 R09: fffffbfff11cae5f [ 546.910490][T21437] R10: fffffbfff11cae5e R11: ffffffff88e572f3 R12: 0000000000000000 [ 546.918844][T21437] R13: ffff88805a84ecc0 R14: ffff88805b64a100 R15: ffff88805a84ecfc [ 546.927009][T21437] FS: 00007fb41170a700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 546.936266][T21437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.942883][T21437] CR2: 000000000168cba0 CR3: 00000000a9af4000 CR4: 00000000001406e0 [ 546.950855][T21437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.958868][T21437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.967019][T21437] Kernel panic - not syncing: Fatal exception [ 546.974789][T21437] Kernel Offset: disabled [ 546.979184][T21437] Rebooting in 86400 seconds..