cal}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 10:38:43 executing program 0: unshare(0x40000000) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f00000028c0)={'ip6gre0\x00', @ifru_data=0x0}) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x4, @rand_addr="2e5214f13dbc9c5d7246548dfbd8ae09"}, {0xa, 0x4e20, 0xffffffff, @loopback, 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x5c) accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x0, 0x2a0, 0x1, {}, {0x77359400}, {0x2, 0x0, 0x1}, 0x1, @can={{0x2, 0x1}, 0x3, 0x3, 0x0, 0x0, "85f6425f27874831"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags=0x4}) 10:38:43 executing program 5: socket(0x40000000015, 0x805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_IGNORE_DF={0x8}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x48}}, 0x0) 10:38:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000200071002000700feffffff0800000000000000", 0x24) [ 616.221961][T12360] usb 5-1: config 0 has an invalid interface number: 158 but max is 0 [ 616.230405][T12360] usb 5-1: config 0 has no interface number 0 [ 616.234202][T20318] IPVS: ftp: loaded support on port[0] = 21 [ 616.236739][T12360] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=c4.2d [ 616.251949][T12360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.281822][T20326] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 616.302872][T12360] usb 5-1: config 0 descriptor?? [ 616.324245][T20327] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.344690][T12360] qmi_wwan 5-1:0.158: skipping garbage [ 616.350348][T12360] qmi_wwan 5-1:0.158: skipping garbage 10:38:43 executing program 3: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote, {[@timestamp={0x44, 0xc, 0x6, 0x0, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) [ 616.487060][T20326] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 616.574865][T12360] usb 5-1: string descriptor 0 read error: -71 [ 616.581699][T12360] qmi_wwan: probe of 5-1:0.158 failed with error -22 [ 616.617271][T12360] usb 5-1: USB disconnect, device number 23 [ 616.758468][T20318] IPVS: ftp: loaded support on port[0] = 21 [ 617.311970][T12525] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 617.561995][T12525] usb 5-1: Using ep0 maxpacket: 16 [ 617.682045][T12525] usb 5-1: config 0 has an invalid interface number: 158 but max is 0 [ 617.697702][T12525] usb 5-1: config 0 has no interface number 0 [ 617.704044][T12525] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=c4.2d [ 617.713252][T12525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.722859][T12525] usb 5-1: config 0 descriptor?? [ 617.764472][T12525] qmi_wwan 5-1:0.158: skipping garbage [ 617.770047][T12525] qmi_wwan 5-1:0.158: skipping garbage [ 618.002264][T12525] usb 5-1: string descriptor 0 read error: -71 [ 618.008868][T12525] qmi_wwan: probe of 5-1:0.158 failed with error -22 [ 618.019579][T12525] usb 5-1: USB disconnect, device number 24 10:38:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_INFO(0x0, 0x4, 0x0) 10:38:45 executing program 3: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote, {[@timestamp={0x44, 0xc, 0x6, 0x0, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 10:38:45 executing program 5: socket(0x40000000015, 0x805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_IGNORE_DF={0x8}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x48}}, 0x0) 10:38:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @dev}], 0x30) 10:38:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x100000001, 0x4, 0x100000001, 0x8}) 10:38:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0xf0ffff}, {0xf0ffff, 0xffff}}}, 0x24}}, 0x0) 10:38:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200001c0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) [ 618.554304][T20356] net_ratelimit: 29 callbacks suppressed [ 618.554332][T20356] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 618.593939][T20353] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 618.607684][T20353] erspan1: mtu greater than device maximum 10:38:45 executing program 3: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote, {[@timestamp={0x44, 0xc, 0x6, 0x0, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 10:38:45 executing program 4: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") 10:38:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000140)=0x0) close(r0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)) 10:38:45 executing program 5: socket(0x40000000015, 0x805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_IGNORE_DF={0x8}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x48}}, 0x0) 10:38:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) [ 618.786287][T20370] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 618.908244][T20377] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 618.921434][T20377] erspan1: mtu greater than device maximum 10:38:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@getsadinfo={0x14, 0x23, 0x5}, 0x14}}, 0x0) 10:38:46 executing program 3: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote, {[@timestamp={0x44, 0xc, 0x6, 0x0, 0x0, [{}, {}]}]}}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 10:38:46 executing program 5: socket(0x40000000015, 0x805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d40)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @gre_common_policy=[@IFLA_GRE_IGNORE_DF={0x8}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x48}}, 0x0) [ 619.139362][T20391] TCP: request_sock_TCP: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 619.157513][T20393] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 619.170659][T20393] erspan1: mtu greater than device maximum 10:38:46 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0c}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0) 10:38:46 executing program 4: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46000000005374f83d6480ccb90300060000000000000000b7380000000000000000000000000020000200"/57], 0x39) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10:38:46 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x1f) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$lock(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 10:38:46 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x3, 0x317, 0x0, 0xffffffff, &(0x7f0000000080)=[{}]}) 10:38:46 executing program 3: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)='sysfs\x00', 0x8801, 0x0) 10:38:46 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0xc0205647, &(0x7f0000000180)=0x7af86329) 10:38:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x19, 0x0, &(0x7f0000000100)=[@transaction={0x40046304, {0x0, 0x400c630e, 0x4c00000000000000, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:38:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec/<\x1a\xad\xecP\x10-\f\xab\xfbE\x91\xac\xcf') 10:38:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 10:38:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x20000000004b, &(0x7f00000000c0)=0x20000000000002, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x3}}}}], 0x28}, 0x0) 10:38:46 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@abs={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="4c0000001400197f09004b0101048c590188ffffcf3d3474b7db65c1d5ce92778de888a7e3356cfa956086cbfe0db35200af440b3c63eaca2caaf0793518d52328d886000000000000000000", 0x4c}], 0x1) [ 619.692544][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 619.698953][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:38:46 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 10:38:47 executing program 0: fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r6 = dup(0xffffffffffffffff) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 10:38:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r2 = dup(r1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x94}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x94}) 10:38:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x20000000004b, &(0x7f00000000c0)=0x20000000000002, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x3}}}}], 0x28}, 0x0) [ 619.942314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 619.948593][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:38:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:38:47 executing program 4: unshare(0x400) accept(0xffffffffffffffff, &(0x7f0000000040)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x13f) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) 10:38:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x20000000004b, &(0x7f00000000c0)=0x20000000000002, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x3}}}}], 0x28}, 0x0) 10:38:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="1b0000001e0007041dfffd946f610500070000001f000000000004", 0x1b}], 0x1}, 0x0) 10:38:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:38:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x20000000004b, &(0x7f00000000c0)=0x20000000000002, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2={0xff, 0x3}}}}], 0x28}, 0x0) 10:38:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x40}, {0x80000006, 0x0, 0x0, 0x6}]}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r4, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x30005, 0x0) 10:38:47 executing program 3: r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="ffffffffffffffff", 0x8}], 0x1) 10:38:48 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 10:38:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x0, [], @ptr}}) 10:38:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r2 = dup(r1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x94}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x94}) 10:38:48 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$sock_buf(r0, 0x1, 0x10, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) 10:38:48 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmmsg$sock(r0, &(0x7f0000005880)=[{{&(0x7f0000000400)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x0) 10:38:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x4d0], [0xc1]}) 10:38:48 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfffffffffffffef0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) fchdir(0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0) socket$inet(0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) open(0x0, 0x0, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0)=0x7, 0x4) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r4, 0x0, 0x8000fffffffe) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) 10:38:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r2 = dup(r1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x94}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x94}) 10:38:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:38:48 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x4d0], [0xc1]}) 10:38:49 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000002200)={0x7e7, "5dbc9c88130f9d6d0bfa01ae5d8a538580d07b431690e01a6da63961e917bce4"}) 10:38:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r2 = dup(r1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x4, 0x0, 0x0, 0x0, 0x94}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x94}) 10:38:49 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 10:38:49 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) 10:38:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x4d0], [0xc1]}) 10:38:49 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)) 10:38:49 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:38:49 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xfffffffd, 0x2, {0x2, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x7, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) 10:38:49 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000340), 0x0, 0x8001) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x1b) fallocate(r3, 0x0, 0x0, 0x2000002) read$eventfd(r4, &(0x7f00000003c0), 0x8) poll(&(0x7f0000000300)=[{r3, 0x20}, {r3, 0x400}, {0xffffffffffffffff, 0x4000}, {r3, 0x4000}, {r1}, {r1, 0x5000}, {r3, 0x200}, {r0, 0x100}], 0x8, 0x0) fallocate(r1, 0x800000000000002, 0x0, 0xffffffff) r5 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$pokeuser(0x6, r6, 0x4, 0x50) r7 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r5, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x0, 0x80000) r8 = dup(r7) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r7) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x20) ftruncate(r5, 0x800fe) sendfile(r8, r9, 0x0, 0x8000fffffffe) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x1, 0x10, 0xffffffffffffffff, 0x0) 10:38:49 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 10:38:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 10:38:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0x4d0], [0xc1]}) 10:38:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x69b31885}}}) ioctl$VIDIOC_S_FMT(r1, 0x40045612, &(0x7f0000000580)={0x2, @pix_mp}) poll(&(0x7f0000000100)=[{r1, 0x680c}, {r0}], 0x2, 0x0) 10:38:50 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:38:50 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 10:38:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000272000)) sync_file_range(r2, 0x0, 0x0, 0x4) 10:38:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 10:38:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00', 0x1002}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="72d11c31096503a518089cdc1b", 0xd}, {&(0x7f00000000c0)='*', 0x1}], 0x2, 0x0) 10:38:50 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x3, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f00000001c0), 0x4) sendmsg(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 10:38:50 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 623.853992][ C1] net_ratelimit: 20 callbacks suppressed [ 623.854060][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 623.867287][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:38:51 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6a, 0x2d, 0x20, 0x8, 0x1199, 0x683b, 0xf901, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x99, 0x0, 0x0, 0xd1, 0x5d, 0xb8}}]}}]}}, 0x0) [ 624.102547][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 624.108915][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:38:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00', 0x1002}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="72d11c31096503a518089cdc1b", 0xd}, {&(0x7f00000000c0)='*', 0x1}], 0x2, 0x0) [ 624.172429][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 624.178802][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 624.185494][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 624.191867][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 624.412611][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 624.418944][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 624.512021][T12446] usb 5-1: new high-speed USB device number 25 using dummy_hcd 10:38:51 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:38:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00', 0x1002}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="72d11c31096503a518089cdc1b", 0xd}, {&(0x7f00000000c0)='*', 0x1}], 0x2, 0x0) 10:38:51 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) 10:38:51 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @dev}}}, 0x90) 10:38:51 executing program 1: unshare(0x20400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 10:38:51 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x0, [], 0x9}) [ 624.792327][T12446] usb 5-1: Using ep0 maxpacket: 8 [ 624.923470][T12446] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 624.931855][T12446] usb 5-1: config 0 has no interface number 0 [ 624.938107][T12446] usb 5-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=f9.01 [ 624.947319][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.972620][T12446] usb 5-1: config 0 descriptor?? [ 625.015764][T12446] sierra 5-1:0.153: Sierra USB modem converter detected [ 625.224812][T12446] usb 5-1: USB disconnect, device number 25 [ 625.231254][T12446] sierra 5-1:0.153: device disconnected [ 625.981857][T12446] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 626.221992][T12446] usb 5-1: Using ep0 maxpacket: 8 [ 626.342132][T12446] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 626.350461][T12446] usb 5-1: config 0 has no interface number 0 [ 626.356768][T12446] usb 5-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=f9.01 [ 626.365918][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.375366][T12446] usb 5-1: config 0 descriptor?? [ 626.414997][T12446] sierra 5-1:0.153: Sierra USB modem converter detected [ 626.638976][T12446] usb 5-1: USB disconnect, device number 26 [ 626.645485][T12446] sierra 5-1:0.153: device disconnected 10:38:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xe0240000, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 10:38:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 10:38:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00', 0x1002}) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="72d11c31096503a518089cdc1b", 0xd}, {&(0x7f00000000c0)='*', 0x1}], 0x2, 0x0) 10:38:53 executing program 1: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000354000), 0x389) write$eventfd(r0, &(0x7f0000951ff8), 0x8) write$eventfd(r0, &(0x7f0000f1aff8)=0x6, 0x8) 10:38:54 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000200)=""/194, 0xc2}], 0x2, 0x0) 10:38:54 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lseek(r0, 0x0, 0x3) 10:38:54 executing program 1: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000354000), 0x389) write$eventfd(r0, &(0x7f0000951ff8), 0x8) write$eventfd(r0, &(0x7f0000f1aff8)=0x6, 0x8) 10:38:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000006000000000000000000000000feffffff010000001100000009000000140000000000106cf484d6433fd30471c99e8d000000006c6f0000000000000000000000090001000000000000000000000000100000faf2ffffff000000005f001a4b0000000000000005000000aaaaaaaaaa00000200000000002e650000008b000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) 10:38:54 executing program 0: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000009f40)=ANY=[@ANYBLOB="b700000017d03c97da4054ffc193e881600b6b1f31ec03170fb17c693dbc701becf593464dc295a7c5051f834e5adb9af9647068485f2b5af59901253944d7aa7cbb1d46cfc2d29b8e0a0969e4324e4f66f49c16d52131e3dcbb886622d2ff1eb95311915a764f00e81401b536c96b7e1f419970cae428affd058b7cdd089dc8889146125500e20bc756e849b14c00b09f0b0f1f96d75397efef020600e2ecb9f695f374f793cc5e212901582ca6e153d0c2da9bd45dd51cabc3115b80d52c0e9ae06c875a4aac8ed1f922e1c747663c33150c29c000850aaa"], 0x8) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x32, 0x0}, 0x0) 10:38:54 executing program 5: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000480)=@add_del={0x2, &(0x7f0000000440)='ip6_vti0\x00'}) 10:38:54 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000480)=""/123, 0x7b}], 0x1, 0x0) 10:38:54 executing program 1: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000354000), 0x389) write$eventfd(r0, &(0x7f0000951ff8), 0x8) write$eventfd(r0, &(0x7f0000f1aff8)=0x6, 0x8) 10:38:54 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/vhost-net\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) 10:38:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 10:38:56 executing program 0: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000009f40)=ANY=[@ANYBLOB="b700000017d03c97da4054ffc193e881600b6b1f31ec03170fb17c693dbc701becf593464dc295a7c5051f834e5adb9af9647068485f2b5af59901253944d7aa7cbb1d46cfc2d29b8e0a0969e4324e4f66f49c16d52131e3dcbb886622d2ff1eb95311915a764f00e81401b536c96b7e1f419970cae428affd058b7cdd089dc8889146125500e20bc756e849b14c00b09f0b0f1f96d75397efef020600e2ecb9f695f374f793cc5e212901582ca6e153d0c2da9bd45dd51cabc3115b80d52c0e9ae06c875a4aac8ed1f922e1c747663c33150c29c000850aaa"], 0x8) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x32, 0x0}, 0x0) 10:38:56 executing program 5: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000480)=@add_del={0x2, &(0x7f0000000440)='ip6_vti0\x00'}) 10:38:56 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/vhost-net\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) 10:38:56 executing program 1: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000354000), 0x389) write$eventfd(r0, &(0x7f0000951ff8), 0x8) write$eventfd(r0, &(0x7f0000f1aff8)=0x6, 0x8) 10:38:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fc7390f20d86635200000000f22d8ec440f200d663504000000440f22c0640f73d3b90f38c93c0f01caf2ad0f2221ba2000ec", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:38:56 executing program 0: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000009f40)=ANY=[@ANYBLOB="b700000017d03c97da4054ffc193e881600b6b1f31ec03170fb17c693dbc701becf593464dc295a7c5051f834e5adb9af9647068485f2b5af59901253944d7aa7cbb1d46cfc2d29b8e0a0969e4324e4f66f49c16d52131e3dcbb886622d2ff1eb95311915a764f00e81401b536c96b7e1f419970cae428affd058b7cdd089dc8889146125500e20bc756e849b14c00b09f0b0f1f96d75397efef020600e2ecb9f695f374f793cc5e212901582ca6e153d0c2da9bd45dd51cabc3115b80d52c0e9ae06c875a4aac8ed1f922e1c747663c33150c29c000850aaa"], 0x8) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x32, 0x0}, 0x0) 10:38:56 executing program 5: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000480)=@add_del={0x2, &(0x7f0000000440)='ip6_vti0\x00'}) 10:38:57 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/vhost-net\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) 10:38:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r1, 0x1d7) r2 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r2, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b2", 0xff09}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 10:38:57 executing program 0: io_submit(0x0, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xff2b}]) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000009f40)=ANY=[@ANYBLOB="b700000017d03c97da4054ffc193e881600b6b1f31ec03170fb17c693dbc701becf593464dc295a7c5051f834e5adb9af9647068485f2b5af59901253944d7aa7cbb1d46cfc2d29b8e0a0969e4324e4f66f49c16d52131e3dcbb886622d2ff1eb95311915a764f00e81401b536c96b7e1f419970cae428affd058b7cdd089dc8889146125500e20bc756e849b14c00b09f0b0f1f96d75397efef020600e2ecb9f695f374f793cc5e212901582ca6e153d0c2da9bd45dd51cabc3115b80d52c0e9ae06c875a4aac8ed1f922e1c747663c33150c29c000850aaa"], 0x8) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x32, 0x0}, 0x0) 10:38:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fc7390f20d86635200000000f22d8ec440f200d663504000000440f22c0640f73d3b90f38c93c0f01caf2ad0f2221ba2000ec", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 630.092287][ C1] net_ratelimit: 26 callbacks suppressed [ 630.092309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 630.104363][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 630.332301][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 630.338692][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 630.412077][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 630.418097][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 630.424503][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 630.430534][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 630.652074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 630.658069][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:38:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a7c8225086600a38e07d4db88a66596759e95307b680ab73e03c53555c97e8e37d01da4d44a994354a9fa3f355214eeabd24fd620b2022d5ad63b369aaffe9a6b608a5fece0eca95d71f2d3e60613a027fb50cbcbd92d44076d3b97247e066165ccf1032f51d36ab231f6c20d87e9167edf69776dca67d90a17ccd18fb9c7b21d53478e382", 0x9d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 10:38:59 executing program 5: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000480)=@add_del={0x2, &(0x7f0000000440)='ip6_vti0\x00'}) 10:38:59 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/vhost-net\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x0) 10:38:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x10000000000001) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x10, "2e1baf760dd5ce24de494fabef066ceb"}, &(0x7f0000000140)=0x18) 10:38:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fc7390f20d86635200000000f22d8ec440f200d663504000000440f22c0640f73d3b90f38c93c0f01caf2ad0f2221ba2000ec", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:38:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='reno\x00', 0x1bc) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46000000040180000000000000000000000004000000000000002000004000000000000000000000000000000000000000000438000200000000007f0000000400080000000000000000000000030000000400000077680000000000000000000000000000f1ade57a9715d563ff0300000000000074f940cfc1e59841d9da552461b4cbfb66eca196752e14d0acf02614d2352effb6bb9624b482c6413cf477fcc90e01ffde818d0e51ab4fa56a0493280c32c453804ced23b64d541fe1ae1230337cfb8078"], 0xc9) sendto$inet(r0, &(0x7f00000012c0)="03", 0x1, 0x9, 0x0, 0x0) 10:38:59 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000240)={@broadcast, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x40000000003a, 0x43ff, @ipv4={[0xffff80fe, 0x689], [], @broadcast}, @local, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @mcast2, @rand_addr="e1f6eb163ae885d39b587147dbb22425"}}}}}}, 0x0) 10:39:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x1}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0xffff, @dev, 'lo\x00'}}, 0x1e) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00\x00\x00\x00\x00Jk\x00'}) 10:39:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0fc7390f20d86635200000000f22d8ec440f200d663504000000440f22c0640f73d3b90f38c93c0f01caf2ad0f2221ba2000ec", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:39:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="11dca5055e0bcfe47bf070") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xd4, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) socket(0x4, 0x0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 10:39:00 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000240)={@broadcast, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x40000000003a, 0x43ff, @ipv4={[0xffff80fe, 0x689], [], @broadcast}, @local, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @mcast2, @rand_addr="e1f6eb163ae885d39b587147dbb22425"}}}}}}, 0x0) 10:39:00 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) read$FUSE(r0, &(0x7f0000000180), 0x1000) ioctl$int_in(r0, 0x800060c0045002, &(0x7f0000000140)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:39:02 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044160, 0x0) 10:39:02 executing program 4: r0 = socket$inet(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x28, 0x2, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'sed\x00'}, 0x64) 10:39:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="11dca5055e0bcfe47bf070") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xd4, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) socket(0x4, 0x0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 10:39:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0xffffffffffffffff, &(0x7f0000000000)) 10:39:02 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000240)={@broadcast, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x40000000003a, 0x43ff, @ipv4={[0xffff80fe, 0x689], [], @broadcast}, @local, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @mcast2, @rand_addr="e1f6eb163ae885d39b587147dbb22425"}}}}}}, 0x0) 10:39:02 executing program 2: futex(0x0, 0x0, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, 0x0, 0x0) 10:39:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x401, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8}]}, 0x20}}, 0x0) 10:39:03 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044160, 0x0) 10:39:03 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 10:39:03 executing program 5: syz_emit_ethernet(0x5e, &(0x7f0000000240)={@broadcast, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x40000000003a, 0x43ff, @ipv4={[0xffff80fe, 0x689], [], @broadcast}, @local, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, [], @mcast2, @rand_addr="e1f6eb163ae885d39b587147dbb22425"}}}}}}, 0x0) 10:39:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0xdc04, &(0x7f0000000140)={&(0x7f00000009c0)=@dellink={0x28, 0x11, 0x103, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b, 0x80000001}]}, 0x28}}, 0x0) 10:39:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="11dca5055e0bcfe47bf070") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xd4, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) socket(0x4, 0x0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) [ 636.164428][T20811] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 10:39:03 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044160, 0x0) 10:39:03 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x52b5, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000300)='\x0f\x02\x80\x05,\x04\xad\xe5\xba\xed\xfa\x9c:!)\xa1\ff\x9a\xeazo\xf1\tB\xd9`_\x05,g\x10KSW\x92Q\xcbo\xdfJ|\xe2\x9bc/\x13\x93-\bH=\xf3\xd1\xb6\xd98\xf5\xc9\xf4\xf8\xa5Ci\x8c\xc6\x85(7\xdc\x12,\b\xca\x88i88\n{H\xe9\x7f[\xea\'\\\x06h\xc9\x14v\x14 \xef\x12\xe5\xa9>\x1e\"\\\x9f@\x1e\xc1\xee1JJ\xa8\xb2\x15\t\xbet\x90\x92', 0x0) write$eventfd(r2, &(0x7f0000000100), 0x8) mmap(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x2000005, 0x12, r2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585604, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)) 10:39:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYBLOB="1f0000000000000000000040050000a90000e7fc4b83bbb6a23b4b6942b7871001000000000000002560b700ff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0x484}]}) [ 636.270484][T20819] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 636.332264][ C1] net_ratelimit: 26 callbacks suppressed [ 636.332292][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 636.344344][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:39:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000007000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) 10:39:03 executing program 2: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000bcf000), 0x4) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) 10:39:03 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044160, 0x0) 10:39:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[], 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') syz_genetlink_get_family_id$tipc(0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895aba03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x58) [ 636.582308][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 636.588756][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:39:03 executing program 5: creat(&(0x7f0000000280)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000007, 0x15012, r0, 0x0) mremap(&(0x7f0000279000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000479000/0x4000)=nil) [ 636.652393][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 636.658765][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 636.665385][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 636.671813][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:39:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1a001000028}, [@ldst={0x7, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 10:39:03 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000002800)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xffffffc7, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, 0x0, 0x0, 0x3}}, 0x68) 10:39:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x62, 0x12, 0x1b, 0x8, 0x148f, 0x9021, 0x44ea, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1f, 0x0, 0x1, 0x96, 0xe6, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0xb}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0xac, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 636.892272][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 636.898588][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:39:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="11dca5055e0bcfe47bf070") madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0xd4, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) socket(0x4, 0x0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 10:39:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000007000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) 10:39:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000002ff5)='/dev/vcsa#\x00', 0x2, 0x1) write(r0, &(0x7f0000022000)="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", 0xfa3) write(r0, &(0x7f0000000040)="0f", 0x1) 10:39:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x6a, 0xfffffffffffffffd, 0x0, 0x0, {0x0, 0x2, 0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0xa, @uid}]}]}, 0x20}}, 0x0) 10:39:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000007000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) 10:39:04 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:04 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 637.271940][T12359] usb 6-1: new low-speed USB device number 14 using dummy_hcd 10:39:04 executing program 0: unshare(0x24020400) unshare(0x24020400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 10:39:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000007000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) 10:39:04 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\x00\x7f\x87\n0\x8b\x1e:y\x8f\xa7\x88p\xf2\xfcE\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbu)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\x9b\xac\xfe\x12\x9e\r(K\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) lseek(r1, 0x5, 0x0) getdents(r1, &(0x7f0000000000)=""/145, 0x91) 10:39:04 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000140), 0x4) [ 637.744751][T12359] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 637.753031][T12359] usb 6-1: config 0 has no interface number 0 [ 637.759217][T12359] usb 6-1: config 0 interface 31 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 637.770025][T12359] usb 6-1: New USB device found, idVendor=148f, idProduct=9021, bcdDevice=44.ea [ 637.779210][T12359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.899617][T12359] usb 6-1: config 0 descriptor?? [ 638.241952][T12359] usb 6-1: reset low-speed USB device number 14 using dummy_hcd [ 639.061899][T12359] usb 6-1: device descriptor read/64, error -71 10:39:07 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:07 executing program 0: unshare(0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x2ca) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) 10:39:07 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:07 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:07 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:07 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) [ 639.990583][T12359] ieee80211 phy4: rt2x00usb_vendor_request: Error - Vendor Request 0x07 failed for offset 0x3000 with error -71 [ 640.003000][T12359] ieee80211 phy4: rt2x00_set_chip: Info - Chipset detected - rt: 0000, rf: 0000, rev: 0000 [ 640.013245][T12359] ieee80211 phy4: rt73usb_init_eeprom: Error - Invalid RT chipset detected [ 640.022107][T12359] ieee80211 phy4: rt2x00lib_probe_dev: Error - Failed to allocate device [ 640.152474][T12359] usb 6-1: USB disconnect, device number 14 10:39:07 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:07 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:07 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:07 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:07 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:07 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:08 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:08 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:08 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:08 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:08 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@empty, @in=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x70}}, 0x81, 0x1f, 0x1f, 0x700000000000, 0x4}, 0x98) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r6 = socket(0xa, 0x6, 0x8) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') r8 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x007$', @ANYRES16=r7, @ANYBLOB="00042dbda100fedbdf25030000000c00020003000000e1bdd6100c0008000700000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14) r9 = openat$cgroup_ro(r3, &(0x7f00000029c0)='cgroup.events\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="000225bd7000fedbdf25010000000800040003000000080006000100000008000400070000001c00020008000700ff0100000800040007d898089d7ef8bd5f60ae00000008000300030000006e33fdc9fd0005d2"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000001c0)) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r12, 0x8004745a, &(0x7f0000000600)) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f00000005c0)={0x6e, 'syz0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c913000180f0ffffebffff6e263f", 0x29}], 0x1, 0x0, 0x1bb}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r13, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:39:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xb9, 0x54, 0xc9, 0x10, 0x10c4, 0x807a, 0xb30, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0x5a, 0x80, 0xf1}}]}}]}}, 0x0) syz_usb_disconnect(r1) 10:39:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="13", 0x1}], 0x1, 0x8180a) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) socket$inet6_udp(0xa, 0x2, 0x0) 10:39:09 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000b80)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="04", 0x1}], 0x1, &(0x7f0000000480)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}], 0x1, 0x0) 10:39:09 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10:39:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0xd, &(0x7f0000000080)={r1}, 0x8) 10:39:09 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0xa, 0x3, 0xf4) dup2(r2, r0) 10:39:09 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000540)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000840)={0x0, 0xa, 0x1, {0xb, @pix={0x0, 0x1f}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r0, 0xc0145608, &(0x7f0000000600)={0x0, 0xb, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "18010004"}, 0x0, 0x0, @userptr, 0x4}) 10:39:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xffffffffffffffb4, 0x2, [@IFLA_GRE_REMOTE={0xfcf5, 0x7, @local}]}}}]}, 0x4c}}, 0x0) 10:39:09 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0xd, &(0x7f0000000080)={r1}, 0x8) 10:39:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x3f, 0x41, 0x8000000001}, 0x3c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x18) 10:39:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x7, &(0x7f00006ed000), &(0x7f0000000000)=0x2) [ 642.465496][T21060] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:39:09 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x40, 0x0) ftruncate(r0, 0x0) [ 642.553964][T12359] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 642.572423][ C1] net_ratelimit: 26 callbacks suppressed [ 642.572445][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 642.584648][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 642.801947][T12359] usb 3-1: Using ep0 maxpacket: 16 [ 642.892258][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 642.898432][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 642.904874][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 642.910901][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 642.917314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 642.923398][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 642.932225][T12359] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 642.940495][T12359] usb 3-1: config 0 has no interface number 0 [ 642.946754][T12359] usb 3-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 642.955940][T12359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.966033][T12359] usb 3-1: config 0 descriptor?? [ 643.014821][T12359] cp210x 3-1:0.111: cp210x converter detected [ 643.132242][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 643.138487][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 643.222440][T12359] cp210x 3-1:0.111: failed to get vendor val 0x370b size 1: -71 [ 643.230205][T12359] cp210x 3-1:0.111: querying part number failed [ 643.252401][T12359] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 643.259635][T12359] cp210x: probe of ttyUSB0 failed with error -71 [ 643.284971][T12359] usb 3-1: USB disconnect, device number 22 [ 643.292177][T12359] cp210x 3-1:0.111: device disconnected [ 644.191826][T12359] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 644.431828][T12359] usb 3-1: Using ep0 maxpacket: 16 [ 644.561990][T12359] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 644.570313][T12359] usb 3-1: config 0 has no interface number 0 [ 644.576631][T12359] usb 3-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 644.585785][T12359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.595247][T12359] usb 3-1: config 0 descriptor?? [ 644.634203][T12359] cp210x 3-1:0.111: cp210x converter detected [ 644.862152][T12359] cp210x 3-1:0.111: failed to get vendor val 0x370b size 1: -71 [ 644.869996][T12359] cp210x 3-1:0.111: querying part number failed [ 644.902292][T12359] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 644.909479][T12359] cp210x: probe of ttyUSB0 failed with error -71 [ 644.918560][T12359] usb 3-1: USB disconnect, device number 23 [ 644.925652][T12359] cp210x 3-1:0.111: device disconnected 10:39:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000b67000), &(0x7f00000000c0)=0x4) 10:39:12 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900), 0x30, 0x0, 0x4000}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 10:39:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000000000040050000a92000000000fa00000000e23f0003000001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0xf8, 0x2, [{0x390}]}) 10:39:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0xd, &(0x7f0000000080)={r1}, 0x8) 10:39:12 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) sendmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x300}, 0x2}], 0x13, 0x24000004) 10:39:12 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10:39:12 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r4, r5, 0x0, 0x1000000000e6) 10:39:12 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0xd, &(0x7f0000000080)={r1}, 0x8) 10:39:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001400010000002c000500018701546eabca1b4e7d7a4b0000b33d5df5000000007e84423e5a0000008000"/57, 0x39}], 0x1}, 0x0) 10:39:12 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x5) 10:39:12 executing program 4: unshare(0x20040600) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080), 0x4) 10:39:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001400010000002c000500018701546eabca1b4e7d7a4b0000b33d5df5000000007e84423e5a0000008000"/57, 0x39}], 0x1}, 0x0) 10:39:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbf, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x2, 0xfd13, &(0x7f0000000000)=""/195}, 0x48) 10:39:12 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900), 0x30, 0x0, 0x4000}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 10:39:12 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) write$FUSE_ENTRY(r0, 0x0, 0x0) 10:39:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001400010000002c000500018701546eabca1b4e7d7a4b0000b33d5df5000000007e84423e5a0000008000"/57, 0x39}], 0x1}, 0x0) 10:39:12 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x99, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 10:39:13 executing program 4: r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0) r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r1) 10:39:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001400010000002c000500018701546eabca1b4e7d7a4b0000b33d5df5000000007e84423e5a0000008000"/57, 0x39}], 0x1}, 0x0) 10:39:13 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900), 0x30, 0x0, 0x4000}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) 10:39:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 10:39:13 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000600)) 10:39:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000100)={0x7c, 0x0, [0x4b564d02]}) 10:39:14 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x1, 0xa6, 0x38, 0x20, 0x54c, 0x38, 0x444a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x0, 0x21, 0xc, 0x61}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001340)={0x2c, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, &(0x7f0000000180)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0}) 10:39:14 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000015c0)=""/4096, 0xfd0f}], 0x1, 0x0, 0x37b}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x4000000080002, 0x0) connect$inet6(r0, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x1, 0x2f) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x2, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x0) 10:39:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x301002, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) fstat(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0xd, 0x1}, 0x9, 0x0, &(0x7f0000000280)={0x0, 0x15, 0x6, 0x2, 0x80}, 0x8, 0xea, 0x7, 0x0, 0x8, 0xb510, &(0x7f00000002c0)="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"}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r4 = dup(r3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x5) write$binfmt_aout(r4, &(0x7f0000001e40)={{0x10b, 0x3f, 0xb6, 0x310, 0x399, 0x53b, 0x2fa, 0x4}, "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", [[], [], [], []]}, 0x1020) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[], 0xffffffe8) dup(r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000080)={0x0, 0x5}) write$sndseq(r7, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000000c0)) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0104320, &(0x7f0000000040)={0x3, &(0x7f0000000140)="841a848e7b963e6e44a11dcd753f67bd80af05f914695eefcfff680bfe4ced6d43af70103629b03fd13779603f8dcb91f7636f098e35a397119032af8e0ca3341a5efb337f8ba2ba07a6d8f3b315edba897cb4fc0fca7772d205151bea9fcb165b5c530144a57254d46b6671fbecf5b2638072d5ba9c10d5d69223e7d38ace176b18f770dcdbcb5043bb84ab928c0596ed0820c930846f84214ed19d470656f78d67e2b159395b93f63bf85f76d0410d94ed034387adf98fac62f2c07773425f40b79d552cd559a8adc58459240929328613e076342df8e381210f2bb59ece95b2e580cb0a4c7399a1b2b4"}) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x6) 10:39:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) 10:39:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x0) 10:39:14 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900), 0x30, 0x0, 0x4000}, 0x0) write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) [ 647.322169][T12359] usb 5-1: new high-speed USB device number 27 using dummy_hcd 10:39:14 executing program 5: r0 = syz_usb_connect(0x0, 0x2cd, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa5, 0xf6, 0xad, 0x20, 0x41e, 0x4041, 0x4f18, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xca, 0x0, 0x0, 0xd1, 0x95, 0x18}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0xac, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10:39:14 executing program 3: futex(0x0, 0x400000085, 0x0, 0x0, 0x0, 0x9001fffd) [ 647.562276][T12359] usb 5-1: Using ep0 maxpacket: 32 10:39:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$isdn(0x22, 0x2, 0x2) dup2(r0, r1) 10:39:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150005008178a8001600a4000100e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 647.683220][T12359] usb 5-1: config 0 has an invalid interface number: 152 but max is 0 [ 647.691647][T12359] usb 5-1: config 0 has no interface number 0 [ 647.698334][T12359] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=44.4a [ 647.707722][T12359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.741992][T12446] usb 6-1: new high-speed USB device number 15 using dummy_hcd 10:39:14 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x80000000001c, 0x0, &(0x7f0000000080)=0x15a) [ 647.820430][T12359] usb 5-1: config 0 descriptor?? 10:39:14 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}, 0x2}, 0x1c) [ 647.874542][T12359] visor 5-1:0.152: Sony Clie 3.5 converter detected [ 647.992168][T12446] usb 6-1: Using ep0 maxpacket: 32 [ 648.153556][T12446] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 648.161917][T12446] usb 6-1: config 0 has no interface number 0 [ 648.168134][T12446] usb 6-1: New USB device found, idVendor=041e, idProduct=4041, bcdDevice=4f.18 [ 648.177394][T12446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.195804][T12446] usb 6-1: config 0 descriptor?? [ 648.247328][T12446] gspca_main: sq930x-2.14.0 probing 041e:4041 [ 648.319331][T12359] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 648.522649][T12359] usb 5-1: USB disconnect, device number 27 [ 648.539528][T12359] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 648.549715][T12359] visor 5-1:0.152: device disconnected [ 648.812474][ C1] net_ratelimit: 26 callbacks suppressed [ 648.812495][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 648.824638][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 649.132365][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 649.138536][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 649.144938][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 649.151120][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 649.157451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 649.163484][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 649.169848][T12446] gspca_sq930x: reg_w 0105 ff00 failed -71 [ 649.242093][T12446] sq930x: probe of 6-1:0.202 failed with error -71 [ 649.250987][T12446] usb 6-1: USB disconnect, device number 15 [ 649.301996][T12359] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 649.372287][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 649.378668][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 649.552072][T12359] usb 5-1: Using ep0 maxpacket: 32 [ 649.682038][T12359] usb 5-1: config 0 has an invalid interface number: 152 but max is 0 [ 649.690462][T12359] usb 5-1: config 0 has no interface number 0 [ 649.696724][T12359] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=44.4a [ 649.705855][T12359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.715375][T12359] usb 5-1: config 0 descriptor?? [ 649.755268][T12359] visor 5-1:0.152: Sony Clie 3.5 converter detected [ 649.841941][T12446] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 650.015920][T12359] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 10:39:17 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x1, 0xa6, 0x38, 0x20, 0x54c, 0x38, 0x444a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x0, 0x21, 0xc, 0x61}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001340)={0x2c, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, &(0x7f0000000180)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0}) 10:39:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="24000000280007031dfffd946f610500070000001d00000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x67}], 0x1}, 0x0) [ 650.060465][T14973] usb 5-1: USB disconnect, device number 28 [ 650.071026][T14973] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 650.080925][T14973] visor 5-1:0.152: device disconnected [ 650.094605][T12446] usb 6-1: Using ep0 maxpacket: 32 [ 650.149814][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 650.213014][T12446] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 650.221470][T12446] usb 6-1: config 0 has no interface number 0 [ 650.227939][T12446] usb 6-1: New USB device found, idVendor=041e, idProduct=4041, bcdDevice=4f.18 [ 650.237372][T12446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.272557][T12446] usb 6-1: config 0 descriptor?? [ 650.318195][T12446] gspca_main: sq930x-2.14.0 probing 041e:4041 [ 650.551975][T14973] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 650.682170][T12446] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 650.688314][T12446] sq930x: probe of 6-1:0.202 failed with error -71 [ 650.700023][T12446] usb 6-1: USB disconnect, device number 16 [ 650.791905][T14973] usb 5-1: Using ep0 maxpacket: 32 [ 650.912817][T14973] usb 5-1: config 0 has an invalid interface number: 152 but max is 0 [ 650.921311][T14973] usb 5-1: config 0 has no interface number 0 [ 650.927705][T14973] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=44.4a [ 650.937045][T14973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.950071][T14973] usb 5-1: config 0 descriptor?? [ 650.994988][T14973] visor 5-1:0.152: Sony Clie 3.5 converter detected 10:39:18 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0xcb, 0x0, 0x0) 10:39:18 executing program 1: clone(0x1000000000011, &(0x7f0000000800), 0x0, 0x0, 0x0) r0 = getpgid(0x0) waitid(0x2, r0, 0x0, 0x2000000000000004, 0x0) 10:39:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x301002, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) fstat(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0xd, 0x1}, 0x9, 0x0, &(0x7f0000000280)={0x0, 0x15, 0x6, 0x2, 0x80}, 0x8, 0xea, 0x7, 0x0, 0x8, 0xb510, &(0x7f00000002c0)="4a4eebe287edaac0ecb90038c17f12c8ce67c9662f7612c658cd6887d1b55270d496ad7f4a3512dd8d93db13b7d5dfb1afa2b4d5444932a32edbcfc65afc5cacf21339f4939b1d8b4cf4e0ef73d1909b7461be5fb4aaaf9c933a74d0b63fed7def45f1d9fc441e526cbcc048de312a8bec2ae15cd846aea5d27a3a4da8e32c9fe472d7809a936d739f5dbff9c876f213ab0857f49933057f1801b66b3644889652ccb945b0bee50eb158ba3acc1353665a631b901e65ace39d7cc3824403f2807c402cabff24dc9f6902ce927283343026f286674000a2549032f72ce96520615c22818b004e70920d31a52ee093a57853504639a0c983b310be019b559c"}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r4 = dup(r3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x5) write$binfmt_aout(r4, &(0x7f0000001e40)={{0x10b, 0x3f, 0xb6, 0x310, 0x399, 0x53b, 0x2fa, 0x4}, "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", [[], [], [], []]}, 0x1020) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[], 0xffffffe8) dup(r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000080)={0x0, 0x5}) write$sndseq(r7, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000000c0)) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0104320, &(0x7f0000000040)={0x3, &(0x7f0000000140)="841a848e7b963e6e44a11dcd753f67bd80af05f914695eefcfff680bfe4ced6d43af70103629b03fd13779603f8dcb91f7636f098e35a397119032af8e0ca3341a5efb337f8ba2ba07a6d8f3b315edba897cb4fc0fca7772d205151bea9fcb165b5c530144a57254d46b6671fbecf5b2638072d5ba9c10d5d69223e7d38ace176b18f770dcdbcb5043bb84ab928c0596ed0820c930846f84214ed19d470656f78d67e2b159395b93f63bf85f76d0410d94ed034387adf98fac62f2c07773425f40b79d552cd559a8adc58459240929328613e076342df8e381210f2bb59ece95b2e580cb0a4c7399a1b2b4"}) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x6) 10:39:18 executing program 3: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109023b000101000000090400000002060000050506000005240000000d240f01000000000000000000090582020000000000090503020000000000"], 0x0) 10:39:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x7, &(0x7f0000000040)) accept(r0, 0x0, 0x0) 10:39:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x301002, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) fstat(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0xd, 0x1}, 0x9, 0x0, &(0x7f0000000280)={0x0, 0x15, 0x6, 0x2, 0x80}, 0x8, 0xea, 0x7, 0x0, 0x8, 0xb510, &(0x7f00000002c0)="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"}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r4 = dup(r3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x5) write$binfmt_aout(r4, &(0x7f0000001e40)={{0x10b, 0x3f, 0xb6, 0x310, 0x399, 0x53b, 0x2fa, 0x4}, "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", [[], [], [], []]}, 0x1020) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[], 0xffffffe8) dup(r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000080)={0x0, 0x5}) write$sndseq(r7, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000000c0)) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0104320, &(0x7f0000000040)={0x3, &(0x7f0000000140)="841a848e7b963e6e44a11dcd753f67bd80af05f914695eefcfff680bfe4ced6d43af70103629b03fd13779603f8dcb91f7636f098e35a397119032af8e0ca3341a5efb337f8ba2ba07a6d8f3b315edba897cb4fc0fca7772d205151bea9fcb165b5c530144a57254d46b6671fbecf5b2638072d5ba9c10d5d69223e7d38ace176b18f770dcdbcb5043bb84ab928c0596ed0820c930846f84214ed19d470656f78d67e2b159395b93f63bf85f76d0410d94ed034387adf98fac62f2c07773425f40b79d552cd559a8adc58459240929328613e076342df8e381210f2bb59ece95b2e580cb0a4c7399a1b2b4"}) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x6) 10:39:18 executing program 0: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070") setsockopt$inet_int(r1, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) 10:39:18 executing program 0: pipe(&(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}) read(0xffffffffffffffff, &(0x7f0000000100)=""/68, 0x3a) close(0xffffffffffffffff) [ 651.429013][T14973] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 10:39:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000000c0)={0x100}) [ 651.472090][T12446] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 651.633359][T12359] usb 5-1: USB disconnect, device number 29 [ 651.652681][T12359] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 651.662364][T12359] visor 5-1:0.152: device disconnected 10:39:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f000000a640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x4}], 0x10}}], 0x2, 0x0) [ 651.714362][T12446] usb 4-1: Using ep0 maxpacket: 32 [ 651.832562][T12446] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 651.844108][T12446] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 652.014428][T12446] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.023932][T12446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.032354][T12446] usb 4-1: Product: syz [ 652.036709][T12446] usb 4-1: Manufacturer: syz [ 652.041510][T12446] usb 4-1: SerialNumber: syz [ 652.084873][T12446] usb 4-1: bad CDC descriptors 10:39:19 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x1, 0xa6, 0x38, 0x20, 0x54c, 0x38, 0x444a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x0, 0x21, 0xc, 0x61}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001340)={0x2c, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, &(0x7f0000000180)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0}) 10:39:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000465000/0x600000)=nil, 0x600000, 0x1000016) [ 652.286985][T14973] usb 4-1: USB disconnect, device number 22 [ 652.541956][T12446] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 652.802067][T12446] usb 5-1: Using ep0 maxpacket: 32 [ 652.934208][T12446] usb 5-1: config 0 has an invalid interface number: 152 but max is 0 [ 652.942773][T12446] usb 5-1: config 0 has no interface number 0 [ 652.949159][T12446] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=44.4a [ 652.958610][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.972681][T12446] usb 5-1: config 0 descriptor?? [ 653.038994][T12446] visor 5-1:0.152: Sony Clie 3.5 converter detected [ 653.067577][T14973] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 653.311906][T14973] usb 4-1: Using ep0 maxpacket: 32 [ 653.372149][T14973] usb 4-1: device descriptor read/all, error -71 [ 653.475861][T12446] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 653.684846][T12359] usb 5-1: USB disconnect, device number 30 [ 653.693519][T12359] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 653.703435][T12359] visor 5-1:0.152: device disconnected 10:39:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x301002, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) fstat(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0xd, 0x1}, 0x9, 0x0, &(0x7f0000000280)={0x0, 0x15, 0x6, 0x2, 0x80}, 0x8, 0xea, 0x7, 0x0, 0x8, 0xb510, &(0x7f00000002c0)="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"}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r4 = dup(r3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x5) write$binfmt_aout(r4, &(0x7f0000001e40)={{0x10b, 0x3f, 0xb6, 0x310, 0x399, 0x53b, 0x2fa, 0x4}, "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", [[], [], [], []]}, 0x1020) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[], 0xffffffe8) dup(r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000080)={0x0, 0x5}) write$sndseq(r7, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000000c0)) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0104320, &(0x7f0000000040)={0x3, &(0x7f0000000140)="841a848e7b963e6e44a11dcd753f67bd80af05f914695eefcfff680bfe4ced6d43af70103629b03fd13779603f8dcb91f7636f098e35a397119032af8e0ca3341a5efb337f8ba2ba07a6d8f3b315edba897cb4fc0fca7772d205151bea9fcb165b5c530144a57254d46b6671fbecf5b2638072d5ba9c10d5d69223e7d38ace176b18f770dcdbcb5043bb84ab928c0596ed0820c930846f84214ed19d470656f78d67e2b159395b93f63bf85f76d0410d94ed034387adf98fac62f2c07773425f40b79d552cd559a8adc58459240929328613e076342df8e381210f2bb59ece95b2e580cb0a4c7399a1b2b4"}) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x6) 10:39:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x27a, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000140)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 10:39:20 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0x0, &(0x7f0000012ffc)=0xfffffffffffffe0a) 10:39:20 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x80000001}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x3dc, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r4, &(0x7f0000000480), 0x100000000000021c, 0x0) 10:39:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x301002, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) fstat(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0xd, 0x1}, 0x9, 0x0, &(0x7f0000000280)={0x0, 0x15, 0x6, 0x2, 0x80}, 0x8, 0xea, 0x7, 0x0, 0x8, 0xb510, &(0x7f00000002c0)="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"}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r4 = dup(r3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x5) write$binfmt_aout(r4, &(0x7f0000001e40)={{0x10b, 0x3f, 0xb6, 0x310, 0x399, 0x53b, 0x2fa, 0x4}, "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", [[], [], [], []]}, 0x1020) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[], 0xffffffe8) dup(r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000080)={0x0, 0x5}) write$sndseq(r7, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000000c0)) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0104320, &(0x7f0000000040)={0x3, &(0x7f0000000140)="841a848e7b963e6e44a11dcd753f67bd80af05f914695eefcfff680bfe4ced6d43af70103629b03fd13779603f8dcb91f7636f098e35a397119032af8e0ca3341a5efb337f8ba2ba07a6d8f3b315edba897cb4fc0fca7772d205151bea9fcb165b5c530144a57254d46b6671fbecf5b2638072d5ba9c10d5d69223e7d38ace176b18f770dcdbcb5043bb84ab928c0596ed0820c930846f84214ed19d470656f78d67e2b159395b93f63bf85f76d0410d94ed034387adf98fac62f2c07773425f40b79d552cd559a8adc58459240929328613e076342df8e381210f2bb59ece95b2e580cb0a4c7399a1b2b4"}) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x6) 10:39:20 executing program 0: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="240000001e0025eaa87865f51ef6bce90a04000200bff20182a9000c080009000d000000", 0x24) 10:39:21 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfcd0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x8, 0x2, 0x12, r0, 0x0) 10:39:21 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x0, 0x52424752}) 10:39:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="240000001e0025eaa87865f51ef6bce90a04000200bff20182a9000c080009000d000000", 0x24) 10:39:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5}) 10:39:21 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x1, 0xa6, 0x38, 0x20, 0x54c, 0x38, 0x444a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x98, 0x0, 0x0, 0x21, 0xc, 0x61}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001340)={0x2c, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, &(0x7f0000000180)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0}) 10:39:21 executing program 0: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="240000001e0025eaa87865f51ef6bce90a04000200bff20182a9000c080009000d000000", 0x24) [ 654.591904][T12359] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 654.861942][T12359] usb 5-1: Using ep0 maxpacket: 32 [ 654.982140][T12359] usb 5-1: config 0 has an invalid interface number: 152 but max is 0 [ 654.990828][T12359] usb 5-1: config 0 has no interface number 0 [ 654.997288][T12359] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=44.4a [ 655.006693][T12359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.019833][T12359] usb 5-1: config 0 descriptor?? [ 655.062270][ C1] net_ratelimit: 26 callbacks suppressed [ 655.062291][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 655.074655][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 655.088295][T12359] visor 5-1:0.152: Sony Clie 3.5 converter detected [ 655.372343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 655.378535][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 655.385049][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 655.391239][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 655.397736][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 655.404018][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 655.514602][T12359] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 655.622235][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 655.628360][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 655.717889][T12359] usb 5-1: USB disconnect, device number 31 [ 655.729631][T12359] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 655.739544][T12359] visor 5-1:0.152: device disconnected 10:39:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x301002, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) fstat(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0xd, 0x1}, 0x9, 0x0, &(0x7f0000000280)={0x0, 0x15, 0x6, 0x2, 0x80}, 0x8, 0xea, 0x7, 0x0, 0x8, 0xb510, &(0x7f00000002c0)="4a4eebe287edaac0ecb90038c17f12c8ce67c9662f7612c658cd6887d1b55270d496ad7f4a3512dd8d93db13b7d5dfb1afa2b4d5444932a32edbcfc65afc5cacf21339f4939b1d8b4cf4e0ef73d1909b7461be5fb4aaaf9c933a74d0b63fed7def45f1d9fc441e526cbcc048de312a8bec2ae15cd846aea5d27a3a4da8e32c9fe472d7809a936d739f5dbff9c876f213ab0857f49933057f1801b66b3644889652ccb945b0bee50eb158ba3acc1353665a631b901e65ace39d7cc3824403f2807c402cabff24dc9f6902ce927283343026f286674000a2549032f72ce96520615c22818b004e70920d31a52ee093a57853504639a0c983b310be019b559c"}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r4 = dup(r3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x5) write$binfmt_aout(r4, &(0x7f0000001e40)={{0x10b, 0x3f, 0xb6, 0x310, 0x399, 0x53b, 0x2fa, 0x4}, "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", [[], [], [], []]}, 0x1020) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[], 0xffffffe8) dup(r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000080)={0x0, 0x5}) write$sndseq(r7, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000000c0)) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0104320, &(0x7f0000000040)={0x3, &(0x7f0000000140)="841a848e7b963e6e44a11dcd753f67bd80af05f914695eefcfff680bfe4ced6d43af70103629b03fd13779603f8dcb91f7636f098e35a397119032af8e0ca3341a5efb337f8ba2ba07a6d8f3b315edba897cb4fc0fca7772d205151bea9fcb165b5c530144a57254d46b6671fbecf5b2638072d5ba9c10d5d69223e7d38ace176b18f770dcdbcb5043bb84ab928c0596ed0820c930846f84214ed19d470656f78d67e2b159395b93f63bf85f76d0410d94ed034387adf98fac62f2c07773425f40b79d552cd559a8adc58459240929328613e076342df8e381210f2bb59ece95b2e580cb0a4c7399a1b2b4"}) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x6) 10:39:23 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x298) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10:39:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x48, 0x2}], 0xd9) 10:39:23 executing program 0: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="240000001e0025eaa87865f51ef6bce90a04000200bff20182a9000c080009000d000000", 0x24) 10:39:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x301002, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x16, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) fstat(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0xd, 0x1}, 0x9, 0x0, &(0x7f0000000280)={0x0, 0x15, 0x6, 0x2, 0x80}, 0x8, 0xea, 0x7, 0x0, 0x8, 0xb510, &(0x7f00000002c0)="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"}) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r4 = dup(r3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x5) write$binfmt_aout(r4, &(0x7f0000001e40)={{0x10b, 0x3f, 0xb6, 0x310, 0x399, 0x53b, 0x2fa, 0x4}, "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", [[], [], [], []]}, 0x1020) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[], 0xffffffe8) dup(r6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000080)={0x0, 0x5}) write$sndseq(r7, &(0x7f000086afd0)=[{0x10081, 0x5, 0x0, 0x0, @time}], 0x30) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f00000000c0)) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0104320, &(0x7f0000000040)={0x3, &(0x7f0000000140)="841a848e7b963e6e44a11dcd753f67bd80af05f914695eefcfff680bfe4ced6d43af70103629b03fd13779603f8dcb91f7636f098e35a397119032af8e0ca3341a5efb337f8ba2ba07a6d8f3b315edba897cb4fc0fca7772d205151bea9fcb165b5c530144a57254d46b6671fbecf5b2638072d5ba9c10d5d69223e7d38ace176b18f770dcdbcb5043bb84ab928c0596ed0820c930846f84214ed19d470656f78d67e2b159395b93f63bf85f76d0410d94ed034387adf98fac62f2c07773425f40b79d552cd559a8adc58459240929328613e076342df8e381210f2bb59ece95b2e580cb0a4c7399a1b2b4"}) r8 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r8, 0x6) 10:39:23 executing program 0: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x2e, 0x2e, 0x2]}, 0x70) 10:39:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 10:39:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) 10:39:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r2, 0x0, 0x63, 0x0, &(0x7f0000000480)=0x1e) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = dup2(r0, r2) dup3(r4, r1, 0x0) 10:39:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 10:39:23 executing program 1: msgctl$MSG_STAT(0x0, 0xd, &(0x7f0000000140)=""/232) 10:39:23 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x10, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}}}, 0x0) 10:39:25 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000d, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000), 0x4) 10:39:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r2, 0x0, 0x63, 0x0, &(0x7f0000000480)=0x1e) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = dup2(r0, r2) dup3(r4, r1, 0x0) 10:39:25 executing program 0: mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc) recvmmsg(r0, &(0x7f00000044c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1}}], 0x4000000000002dd, 0x2, 0x0) 10:39:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f407000000000a020000000000000000000000002000", 0x20) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/184, 0xb8}], 0x2}}], 0x8, 0x0, 0x0) 10:39:25 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) connect(r0, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80) connect(r0, &(0x7f0000000000)=@generic={0x2, "a7e9af2b85699d4e5dcd6b30b96dcf86ab61b62832f567692c92ee80948a2c392aeff31ce108c0aeb46cd5428f11eab8053fa3245148f8d4b3b4007b8f92f999675e333bfac59a4e5316c667777e4d591e5ea28f2ea4d51be8fca49d535e496682b762e34c0af485bda57e777d1929e19735c90300cd51af87a9b6db7bd3"}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x28, 0x0) 10:39:25 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) flock(r1, 0xfffffffffffffffe) flock(r0, 0x1) flock(r0, 0x1) 10:39:25 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000100)) 10:39:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0x28000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 10:39:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="4fff6cf139656789fda6e5c8390d"], 0xe1) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 10:39:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r2, 0x0, 0x63, 0x0, &(0x7f0000000480)=0x1e) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = dup2(r0, r2) dup3(r4, r1, 0x0) 10:39:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 10:39:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1}, 0x6e) ioctl$KVM_RUN(r4, 0xae80, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fb88023f3c408bd95b8295482497c9041f21cfcc"], 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:39:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 10:39:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0x28000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 10:39:26 executing program 1: syz_emit_ethernet(0x9c, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4, 0x8100, 0x2b00}}}}}}, 0x0) 10:39:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="4fff6cf139656789fda6e5c8390d"], 0xe1) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 10:39:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r2, 0x0, 0x63, 0x0, &(0x7f0000000480)=0x1e) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = dup2(r0, r2) dup3(r4, r1, 0x0) 10:39:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0x28000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 10:39:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 10:39:26 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x77, 0x2, 0x30, 0x20, 0x6a5, 0xd800, 0xb654, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x57, 0x0, 0x0, 0xca, 0x2d, 0x2d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0xac, &(0x7f0000001900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000001940), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0}) 10:39:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="4fff6cf139656789fda6e5c8390d"], 0xe1) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 10:39:26 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000001000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 10:39:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0x28000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 10:39:26 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000002e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="fc446145f2b0d76fdd93cce75b8eb034", 0x2}, 0x1c, 0x0}}], 0x1, 0x0) 10:39:26 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f0000001080)=""/4096, &(0x7f0000000000)=0xffffff03) 10:39:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x8}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="4fff6cf139656789fda6e5c8390d"], 0xe1) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 10:39:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x100000003f, 0x0, &(0x7f00000000c0)=0xbc) 10:39:26 executing program 5: clone(0xdfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() r1 = gettid() tkill(r1, 0x15) ptrace(0x10, r0) ptrace$cont(0x4205, r0, 0x2, 0x20007ff6) [ 659.562497][T14973] usb 2-1: new high-speed USB device number 58 using dummy_hcd 10:39:26 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000480)={0x0, @pix_mp={0x3, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x400000}]}}) 10:39:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000140)='h', 0x1, 0x8800, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto(r0, &(0x7f0000000680)="78b1777439516082d2fee6f5d13f83b9122118a78fec792ef63990295a09b5c9d27b03c41af6679caed6920f0ae49741a9754f4b2dec9f81b94c653088466989feb141e8", 0x44, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/247, 0xf7}], 0x1}}], 0x1, 0x0, 0x0) 10:39:26 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x100000003f, 0x0, &(0x7f00000000c0)=0xbc) [ 659.802580][T14973] usb 2-1: Using ep0 maxpacket: 32 [ 659.922218][T14973] usb 2-1: config 0 has an invalid interface number: 87 but max is 0 [ 659.930500][T14973] usb 2-1: config 0 has no interface number 0 [ 659.937128][T14973] usb 2-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 659.946303][T14973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.981404][T14973] usb 2-1: config 0 descriptor?? [ 660.026200][T14973] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 661.292299][ C1] net_ratelimit: 26 callbacks suppressed [ 661.292321][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 661.304180][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 661.331995][T14973] gspca_nw80x: reg_w err -71 [ 661.336805][T14973] nw80x: probe of 2-1:0.87 failed with error -71 [ 661.345985][T14973] usb 2-1: USB disconnect, device number 58 [ 661.612377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 661.618497][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 661.624796][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 661.630892][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 661.637134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 661.643135][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 661.852212][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 661.858321][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 662.081832][T12359] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 662.321845][T12359] usb 2-1: Using ep0 maxpacket: 32 [ 662.442052][T12359] usb 2-1: config 0 has an invalid interface number: 87 but max is 0 [ 662.450223][T12359] usb 2-1: config 0 has no interface number 0 [ 662.456582][T12359] usb 2-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 662.465719][T12359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.475132][T12359] usb 2-1: config 0 descriptor?? [ 662.515800][T12359] gspca_main: nw80x-2.14.0 probing 06a5:d800 10:39:29 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x5e, 0x5b, 0x4c, 0x8, 0x1199, 0x6804, 0xd8e3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x9b, 0x17, 0x5c}}]}}]}}, 0x0) 10:39:29 executing program 4: capset(&(0x7f00000004c0)={0x19980330}, &(0x7f0000000500)) socket$key(0xf, 0x3, 0x2) 10:39:29 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x3) 10:39:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x100000003f, 0x0, &(0x7f00000000c0)=0xbc) 10:39:29 executing program 5: mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000), 0x1fa) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 10:39:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000280)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x100080101) [ 662.852377][T12359] gspca_nw80x: reg_w err -71 [ 662.857924][T12359] nw80x: probe of 2-1:0.87 failed with error -71 [ 662.904628][T12359] usb 2-1: USB disconnect, device number 59 10:39:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 10:39:30 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') sendfile(r0, r3, 0x0, 0x800000bf) 10:39:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x223) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x9d}}, 0x10) sendfile(r0, r1, 0x0, 0xffe4) 10:39:30 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x200000, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 10:39:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x100000003f, 0x0, &(0x7f00000000c0)=0xbc) 10:39:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 663.315288][T12359] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 663.571936][T12359] usb 2-1: Using ep0 maxpacket: 8 [ 663.692385][T12359] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 663.700547][T12359] usb 2-1: config 0 has no interface number 0 [ 663.706798][T12359] usb 2-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=d8.e3 [ 663.716020][T12359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.725582][T12359] usb 2-1: config 0 descriptor?? [ 663.764876][T12359] sierra 2-1:0.3: Sierra USB modem converter detected [ 663.974628][T12359] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 663.986823][T12359] usb 2-1: USB disconnect, device number 60 [ 663.995937][T12359] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 664.005630][T12359] sierra 2-1:0.3: device disconnected [ 664.732018][T12359] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 664.972078][T12359] usb 2-1: Using ep0 maxpacket: 8 [ 665.092114][T12359] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 665.100264][T12359] usb 2-1: config 0 has no interface number 0 [ 665.106532][T12359] usb 2-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=d8.e3 [ 665.115663][T12359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.125019][T12359] usb 2-1: config 0 descriptor?? [ 665.164906][T12359] sierra 2-1:0.3: Sierra USB modem converter detected [ 665.375083][T12359] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 665.385559][T12359] usb 2-1: USB disconnect, device number 61 [ 665.395327][T12359] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 665.404975][T12359] sierra 2-1:0.3: device disconnected 10:39:32 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x5e, 0x5b, 0x4c, 0x8, 0x1199, 0x6804, 0xd8e3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x9b, 0x17, 0x5c}}]}}]}}, 0x0) 10:39:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) r2 = socket$inet(0x10, 0x80803, 0x4000000000000004) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="4c0000001300ff09fffd956fa283b700008c0e08000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x4c}], 0x1}, 0x0) 10:39:32 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fstat(r0, &(0x7f00000000c0)) 10:39:32 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x2, @empty, 0x5}}}, &(0x7f00000002c0)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0), 0x4) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x49) 10:39:32 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRES64], 0x8) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x8100000, 0x0) splice(r0, 0x0, r3, 0x0, 0x8, 0x0) 10:39:32 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_ABSBIT(r1, 0x80044940, 0x717000) 10:39:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00006ed000), &(0x7f0000f24000)=0x2) 10:39:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000015) 10:39:33 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004000000c84b4b01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:39:33 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 10:39:33 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) syz_emit_ethernet(0xc0, &(0x7f00000001c0)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) 10:39:33 executing program 4: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe5e, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) [ 666.365668][T14973] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 666.582205][T12359] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 666.612008][T14973] usb 2-1: Using ep0 maxpacket: 8 [ 666.732127][T14973] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 666.740171][T14973] usb 2-1: config 0 has no interface number 0 [ 666.746396][T14973] usb 2-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=d8.e3 [ 666.755533][T14973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.778529][T14973] usb 2-1: config 0 descriptor?? [ 666.824961][T14973] sierra 2-1:0.3: Sierra USB modem converter detected [ 666.832044][T12359] usb 6-1: Using ep0 maxpacket: 8 [ 666.982179][T12359] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb [ 666.991371][T12359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.001331][T12359] usb 6-1: config 0 descriptor?? [ 667.034652][T14973] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 667.048884][T14973] usb 2-1: USB disconnect, device number 62 [ 667.058504][T14973] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 667.068458][T14973] sierra 2-1:0.3: device disconnected 10:39:34 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x5e, 0x5b, 0x4c, 0x8, 0x1199, 0x6804, 0xd8e3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x9b, 0x17, 0x5c}}]}}]}}, 0x0) 10:39:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d", 0x26}], 0x4, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 10:39:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffff) write$binfmt_elf64(r1, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) 10:39:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) close(r1) 10:39:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000015) [ 667.512054][T12359] gs_usb 6-1:0.0: Configuring for 2 interfaces [ 667.532347][ C1] net_ratelimit: 26 callbacks suppressed [ 667.532369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 667.544339][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:39:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) close(r1) 10:39:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) close(r1) 10:39:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) close(r1) [ 667.852296][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 667.858909][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 667.865654][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 667.871995][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 667.878432][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 667.884715][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 667.911877][T12360] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 667.952451][T12359] gs_usb 6-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 668.014532][T12359] gs_usb: probe of 6-1:0.0 failed with error -71 [ 668.034720][T12359] usb 6-1: USB disconnect, device number 17 [ 668.092427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 668.098690][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 668.152287][T12360] usb 2-1: Using ep0 maxpacket: 8 [ 668.282350][T12360] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 668.290608][T12360] usb 2-1: config 0 has no interface number 0 [ 668.296908][T12360] usb 2-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=d8.e3 [ 668.306100][T12360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.351888][T12360] usb 2-1: config 0 descriptor?? [ 668.415191][T12360] sierra 2-1:0.3: Sierra USB modem converter detected [ 668.640090][T12360] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 668.670732][T12360] usb 2-1: USB disconnect, device number 63 [ 668.694654][T12360] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 668.704704][T12360] sierra 2-1:0.3: device disconnected [ 668.713089][T12359] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 668.961866][T12359] usb 6-1: Using ep0 maxpacket: 8 [ 669.092117][T12359] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb [ 669.101319][T12359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.110930][T12359] usb 6-1: config 0 descriptor?? 10:39:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000015) 10:39:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) close(r1) 10:39:36 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4}, {&(0x7f00000024c0)=""/4096, 0x107a}, {&(0x7f0000000400)=""/120, 0x4}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x1de}, {&(0x7f0000000540)=""/154, 0xf}, {&(0x7f0000000140)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x40000000000005d, 0x6, &(0x7f0000003700)={0x77359400}) [ 669.412146][T12359] gs_usb 6-1:0.0: Configuring for 2 interfaces 10:39:36 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x5e, 0x5b, 0x4c, 0x8, 0x1199, 0x6804, 0xd8e3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x9b, 0x17, 0x5c}}]}}]}}, 0x0) 10:39:36 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004000000c84b4b01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 669.492955][T12359] gs_usb 6-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 669.501394][T12359] gs_usb: probe of 6-1:0.0 failed with error -71 [ 669.553186][T12359] usb 6-1: USB disconnect, device number 18 [ 669.821898][T12360] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 669.921921][T12359] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 670.061896][T12360] usb 2-1: Using ep0 maxpacket: 8 [ 670.162065][T12359] usb 6-1: Using ep0 maxpacket: 8 [ 670.182322][T12360] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 670.190489][T12360] usb 2-1: config 0 has no interface number 0 [ 670.196832][T12360] usb 2-1: New USB device found, idVendor=1199, idProduct=6804, bcdDevice=d8.e3 [ 670.206124][T12360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.215721][T12360] usb 2-1: config 0 descriptor?? [ 670.255288][T12360] sierra 2-1:0.3: Sierra USB modem converter detected [ 670.292746][T12359] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb [ 670.301988][T12359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.313400][T12359] usb 6-1: config 0 descriptor?? [ 670.464763][T12360] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 670.477485][T12360] usb 2-1: USB disconnect, device number 64 [ 670.487738][T12360] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 670.497663][T12360] sierra 2-1:0.3: device disconnected 10:39:37 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x17e, 0x4) listen(r0, 0x100000000008) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x0) listen(r0, 0x8001) 10:39:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) close(r1) 10:39:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xca, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0xfffffed8}], 0x1}}], 0x1, 0x0, 0x0) 10:39:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000015) 10:39:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000039000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x3a, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) close(r1) 10:39:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, 0xffffffffffffffff}) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x130000015}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 670.794810][T12359] gs_usb 6-1:0.0: Configuring for 2 interfaces 10:39:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3f000000}, 0x1c) 10:39:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xca, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0xfffffed8}], 0x1}}], 0x1, 0x0, 0x0) 10:39:38 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x0, 0xffffffffffffffff}, 0x1, 0xfffffffffffffffe, 0xffff, {0x516}, 0x1, 0x7}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x802, 0x0) sendmmsg(r1, &(0x7f000000ab00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f000000a280), 0x0, &(0x7f0000000040)}}, {{&(0x7f000000a440)=@can, 0x10, &(0x7f000000a5c0), 0x3a5, &(0x7f000000a600)}, 0x3}], 0x2, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') sendto$inet6(r0, 0x0, 0x0, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0xfe800000, 0xe603000000000000]}}, 0x1c) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x4042, 0x0) 10:39:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3f000000}, 0x1c) 10:39:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xca, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0xfffffed8}], 0x1}}], 0x1, 0x0, 0x0) [ 671.223520][T12359] gs_usb 6-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 671.307288][T12359] gs_usb: probe of 6-1:0.0 failed with error -71 [ 671.337420][T12359] usb 6-1: USB disconnect, device number 19 10:39:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004000000c84b4b01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:39:38 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2010000, &(0x7f000000a000)) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/89, 0x59) 10:39:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x20000000006) sendmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a08a1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 10:39:38 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3f000000}, 0x1c) 10:39:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f0000001540)=[{{0x0, 0xca, &(0x7f0000000f40)=[{&(0x7f0000002980)=""/4096, 0xfffffed8}], 0x1}}], 0x1, 0x0, 0x0) 10:39:39 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x0, 0xffffffffffffffff}, 0x1, 0xfffffffffffffffe, 0xffff, {0x516}, 0x1, 0x7}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x802, 0x0) sendmmsg(r1, &(0x7f000000ab00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f000000a280), 0x0, &(0x7f0000000040)}}, {{&(0x7f000000a440)=@can, 0x10, &(0x7f000000a5c0), 0x3a5, &(0x7f000000a600)}, 0x3}], 0x2, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') sendto$inet6(r0, 0x0, 0x0, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0xfe800000, 0xe603000000000000]}}, 0x1c) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x4042, 0x0) [ 671.953989][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 672.062354][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:39:39 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000b8fc8ef1576bb9daf8"], 0x10}}], 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 10:39:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x0, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3f000000}, 0x1c) [ 672.222111][T12359] usb 6-1: new high-speed USB device number 20 using dummy_hcd 10:39:39 executing program 1: unshare(0x20600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, 0x0) 10:39:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000300)='\x00', 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x7) fcntl$addseals(r1, 0x409, 0xd) r2 = dup(r1) lseek(r1, 0x0, 0x3) write$P9_RWALK(r2, 0x0, 0x0) [ 672.481902][T12359] usb 6-1: Using ep0 maxpacket: 8 10:39:39 executing program 2: unshare(0x20400) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x50) 10:39:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f407000000002500"/32, 0x20) [ 672.632633][T12359] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb [ 672.641923][T12359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.695171][T12359] usb 6-1: config 0 descriptor?? [ 673.162121][T12359] gs_usb 6-1:0.0: Configuring for 2 interfaces [ 673.602093][T12359] gs_usb 6-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 673.642876][T12359] gs_usb: probe of 6-1:0.0 failed with error -71 [ 673.663261][T12359] usb 6-1: USB disconnect, device number 20 [ 673.772293][ C1] net_ratelimit: 26 callbacks suppressed [ 673.772357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 673.784373][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:39:41 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4f, 0xd0, 0xa6, 0x8, 0x1209, 0x2323, 0xdfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4a, 0x63, 0x62}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xac, &(0x7f0000000400)=ANY=[@ANYBLOB="080004000000c84b4b01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0xac, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:39:41 executing program 1: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.capability\x00', 0x0, 0x0, 0x0) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x1e1) 10:39:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000300)='\x00', 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x7) fcntl$addseals(r1, 0x409, 0xd) r2 = dup(r1) lseek(r1, 0x0, 0x3) write$P9_RWALK(r2, 0x0, 0x0) 10:39:41 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000"], 0x8, 0x0) 10:39:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x50}}, 0x0) 10:39:41 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x0, 0xffffffffffffffff}, 0x1, 0xfffffffffffffffe, 0xffff, {0x516}, 0x1, 0x7}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x802, 0x0) sendmmsg(r1, &(0x7f000000ab00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f000000a280), 0x0, &(0x7f0000000040)}}, {{&(0x7f000000a440)=@can, 0x10, &(0x7f000000a5c0), 0x3a5, &(0x7f000000a600)}, 0x3}], 0x2, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') sendto$inet6(r0, 0x0, 0x0, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0xfe800000, 0xe603000000000000]}}, 0x1c) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x4042, 0x0) [ 674.091983][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.098104][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 674.104338][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.110399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 674.116640][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.122811][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:39:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6, &(0x7f0000000400)=0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10:39:41 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) 10:39:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={r4, 0x0, 0x3}) [ 674.332381][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 674.341067][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 674.378658][T21815] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 10:39:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xc11, 0x0, 0x0, {0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}}, 0x2) 10:39:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000300)='\x00', 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x7) fcntl$addseals(r1, 0x409, 0xd) r2 = dup(r1) lseek(r1, 0x0, 0x3) write$P9_RWALK(r2, 0x0, 0x0) 10:39:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c1f023c126285719070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) munmap(&(0x7f0000f17000/0x1000)=nil, 0x1000) ioctl$EVIOCSCLOCKID(r1, 0x80084503, &(0x7f0000ffcffc)) [ 674.502082][T12359] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 674.741913][T12359] usb 6-1: Using ep0 maxpacket: 8 [ 674.863910][T12359] usb 6-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice= d.fb [ 674.873563][T12359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.904670][T12359] usb 6-1: config 0 descriptor?? [ 675.382095][T12359] gs_usb 6-1:0.0: Configuring for 2 interfaces [ 675.812233][T12359] gs_usb 6-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 675.892500][T12359] gs_usb: probe of 6-1:0.0 failed with error -71 [ 675.915826][T12359] usb 6-1: USB disconnect, device number 21 10:39:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rseq(&(0x7f0000000600), 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) 10:39:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000700010000000000000000000000feffac6f74888672"]) 10:39:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000300)='\x00', 0x1) sendfile(r0, r1, &(0x7f0000000000), 0x7) fcntl$addseals(r1, 0x409, 0xd) r2 = dup(r1) lseek(r1, 0x0, 0x3) write$P9_RWALK(r2, 0x0, 0x0) 10:39:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0xb, &(0x7f0000000080)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}}, 0x20) 10:39:43 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x0, 0xffffffffffffffff}, 0x1, 0xfffffffffffffffe, 0xffff, {0x516}, 0x1, 0x7}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x802, 0x0) sendmmsg(r1, &(0x7f000000ab00)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f000000a280), 0x0, &(0x7f0000000040)}}, {{&(0x7f000000a440)=@can, 0x10, &(0x7f000000a5c0), 0x3a5, &(0x7f000000a600)}, 0x3}], 0x2, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') sendto$inet6(r0, 0x0, 0x0, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0xfe800000, 0xe603000000000000]}}, 0x1c) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x4042, 0x0) 10:39:43 executing program 2: socket$alg(0x26, 0x5, 0x0) syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x15}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 10:39:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x457) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_getneigh={0x20, 0x1e, 0x50b}, 0x20}}, 0x0) 10:39:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x101000000000001, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) connect$inet6(r0, &(0x7f0000000900)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 10:39:43 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x10000000001, &(0x7f0000b67000), 0x0) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) getuid() socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) lstat(0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x10000000001, &(0x7f0000b67000), &(0x7f00000000c0)=0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000004c0)=0x6) setreuid(0x0, r5) geteuid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr="6e31bfd72c89323c0c80b5167329292c"}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="8e0000000000000056116a5ecd2caee031389b0de8a8dc2f8265ff3c2d8d97e1bc175ebe4fdb51f23ed688b6000000bd05350be012084a7e17a871f49a7f07ac87d8ef419c18ea5e1521b855a97fab2e"], 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x7a, &(0x7f0000000080)={r7}, &(0x7f0000000140)=0x18) 10:39:43 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 676.656933][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.707304][T21888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:39:43 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 10:39:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) 10:39:43 executing program 2: socket$alg(0x26, 0x5, 0x0) syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x15}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 10:39:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000140)='eth0\xbbmime_type-user\x00'}, 0x30) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000140)='sit0\x00') 10:39:43 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) write$vnet(r0, &(0x7f0000000100)={0x1, {&(0x7f0000000200)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 10:39:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000f46000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) 10:39:44 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0), 0xc, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000000000000007410000004c00180000000062726f6164636173742d010000000000000000000000000021000000000000000000000000000000000000000000007800"/98], 0x68}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 10:39:44 executing program 0: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f8eff3)='/dev/snd/seq\x00', 0x0, 0x20401) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x8000000e}) write$sndseq(r1, &(0x7f0000000200), 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8) 10:39:44 executing program 2: socket$alg(0x26, 0x5, 0x0) syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x15}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 10:39:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f0000000080)) 10:39:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) 10:39:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) 10:39:44 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) 10:39:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) 10:39:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="0203060910000000002000369e0004000200aa0080000000000000000000000105000600200000000a00000000000000000500cbe801000100001f000000000000030000000000e5010001000000009b002000020000627c0500050000ff1700000000000000040000000001170000000000000000c295fdb97ce2d11f1643cc"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000007000000000000000000c60005001a0000000000000000000000ffffac1414aa00000000000000000000000000000000ff7f0000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 10:39:44 executing program 2: socket$alg(0x26, 0x5, 0x0) syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x15}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 10:39:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) 10:39:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = gettid() syz_open_procfs(r1, &(0x7f0000000100)='attr/sockcreate\x00') 10:39:44 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) 10:39:44 executing program 5: pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004900070fab092500090007000a0600000000000000013693210001", 0x1f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 10:39:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) 10:39:44 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) 10:39:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000007000)=@newsa={0xf0, 0x10, 0x129, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2}, {@in=@multicast2}}}, 0xf0}}, 0x0) 10:39:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0xde86) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffff, 0x0) [ 677.964406][T21986] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.5'. 10:39:45 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x31, 0xfffffffffffffffe, 0x3) 10:39:45 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x24, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) sendmmsg$inet(r0, &(0x7f0000007180)=[{{&(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="e2", 0x1}], 0x1}}], 0x1, 0x0) 10:39:45 executing program 2: perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:39:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x277, 0x0, 0x8}]}) 10:39:45 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000904000)) 10:39:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x541a, &(0x7f0000000040)) 10:39:45 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 10:39:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000180)={0x100000000d415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0xfffc, 0x0, 0xf}) 10:39:45 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x22, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x90) 10:39:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'eql\x00', 0xbb6b2d8b7f5c7fd1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'eql\x00', 0xbb6b2d8b7f5c7fd1}) 10:39:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c) unshare(0x600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x18) 10:39:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000990000400000000085ed2e"]) 10:39:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 10:39:46 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="240000001a0007041dfffd946f6105000a00000a1f000003002008000400030004000000", 0x24}], 0x1}, 0x0) 10:39:46 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00\x0f\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="4100000000000000000800000000000084000000000000000000000a000025b0ec3600000000000000000000000000000000007d"]}) 10:39:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r0, 0x0) 10:39:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000340)="66baf80cb8e09ec783ef66bafc0cb8ef6021efef64670fc25f00a8da210f209ab8010000000f01c10f01c3660fc7b1776e56c5d30866b832008ec80f7910b816257688ef66bafc0cc4e10c55c466ef", 0xfffffffffffffe72}], 0x1, 0x0, 0x0, 0xfffffea5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:39:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x3af, &(0x7f00008b7ff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000002010100000006000000000002000000100002000c0001000800010000000000"], 0x24}}, 0x0) 10:39:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) [ 679.167193][T22062] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 10:39:46 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x2}, 0x10) 10:39:46 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00\x0f\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="4100000000000000000800000000000084000000000000000000000a000025b0ec3600000000000000000000000000000000007d"]}) 10:39:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r0, 0x0) 10:39:46 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r0, &(0x7f000000c900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=[{0x10}, {0x10, 0x110, 0x2}], 0x20}}], 0x1, 0x0) 10:39:46 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00\x0f\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="4100000000000000000800000000000084000000000000000000000a000025b0ec3600000000000000000000000000000000007d"]}) 10:39:46 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40045108, 0xfffffffffffffffe) 10:39:46 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000106ff00fdde458807110000f305f0f00800018002fd00dcffdf00", 0x1f) 10:39:46 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\xff\x00\x00\x80\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00') 10:39:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8000fffffffe) 10:39:46 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f00000000c0)={'gre0\x00\x0f\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="4100000000000000000800000000000084000000000000000000000a000025b0ec3600000000000000000000000000000000007d"]}) [ 679.637226][T22092] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 679.645591][T22092] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. 10:39:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r3, 0x107, 0xf, 0x0, &(0x7f0000000000)=0x37) 10:39:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r0, 0x0) 10:39:46 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x100000000000001}, {}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 10:39:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, 0x0, 0x4}, 0x20) 10:39:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@multicast2, @loopback}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\xff\xff\xff\xff\b\x02\x00\x11', 0x5}) 10:39:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0a85320, &(0x7f0000000400)={{0xffffffbfffffff80}}) 10:39:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r1, r0, 0x0) 10:39:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1094d332fe51e202f6bacea1f648ebc7200000009a31f0a38cf0b38ea9478415ba52f839230900080000000000000048b4"], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 680.012421][ C1] net_ratelimit: 26 callbacks suppressed [ 680.012443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 680.024515][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:39:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:39:47 executing program 1: memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="dbcf66e3bbc83a1741ee78000001000000ce680000bf250500b53f019c6150bcef00"/43], 0x11) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x800fe) sendfile(r3, r4, 0x0, 0x8000fffffffe) 10:39:47 executing program 2: syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) io_uring_setup(0x64, &(0x7f0000000040)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) inotify_init1(0x0) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 10:39:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@dstopts, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 680.268413][T22134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:39:47 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x9, 0x31, 0xc1, 0x8, 0x1934, 0x706, 0xd76d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x49, 0x0, 0x0, 0xad, 0x49, 0x4c}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 680.332278][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.338401][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 680.344692][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.350788][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 680.357128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.363355][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:39:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@dstopts, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 10:39:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)='e', 0x1}, {&(0x7f0000000040)='n', 0x1}], 0x2}}], 0x1, 0x0) 10:39:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:39:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x7ffffff9, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x24, 0x2, [@tunl_policy=[@IFLA_IPTUN_TOS={0x8}], @tunl_policy=[@IFLA_IPTUN_TTL={0x8, 0x4, 0xc1}], @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}]]}}}]}, 0x54}}, 0x0) [ 680.572172][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 680.578402][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:39:47 executing program 0: mmap(&(0x7f0000000000/0xf60000)=nil, 0xf60000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x0, 0x0, 0x0, &(0x7f0000f19f82)='\xff\xff\xfb\xff\x91\x18\xb1\xfdC\xba2*[@\\\x01q\xd1b8\xd6\x9c\x8b\xe8bE\xb8\x98\x8f\x04m\xa1\xda8\"\xc2\x9c\xf6gsY\x02\x84\xdd\\8\xc6\xf9\\7Y\x84\xa8)\xf7;];\x1c H\xbaV\x914\xb6\xe0\\\xc5p(=\xc3\xd7\x026\x822\xd9\xf7]\x05zR6k\x1e|\xe6\xb4\x1a(\xf7M\xd8S6\t\xae\xa70\x05\xd7\x84O\x81j\xce\xcbXa\xbf\x04+\xe6\xd5\xde\xc6#\x06\xd2\x97\x839\x91M'}, 0x48) [ 680.673036][T12359] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 680.699480][T22161] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:39:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@dstopts, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 680.838844][T22166] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 680.847886][T22166] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 680.856139][T22166] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 680.864432][T22166] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 680.912527][T12359] usb 6-1: Using ep0 maxpacket: 8 10:39:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000100)=0x0) close(r0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x1) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 10:39:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@dstopts, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 681.034928][T12359] usb 6-1: config 0 has an invalid interface number: 73 but max is 0 [ 681.043186][T12359] usb 6-1: config 0 has no interface number 0 [ 681.049395][T12359] usb 6-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=d7.6d [ 681.058599][T12359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.127496][T12359] usb 6-1: config 0 descriptor?? 10:39:48 executing program 1: memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="dbcf66e3bbc83a1741ee78000001000000ce680000bf250500b53f019c6150bcef00"/43], 0x11) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x800fe) sendfile(r3, r4, 0x0, 0x8000fffffffe) 10:39:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000001240)) 10:39:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 681.175066][T12359] hub 6-1:0.73: ignoring external hub [ 681.182729][T12359] f81232 6-1:0.73: f81232 converter detected [ 681.202717][T12359] usb 6-1: f81232 converter now attached to ttyUSB0 [ 681.276026][T22187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 681.516400][T12359] usb 6-1: USB disconnect, device number 22 [ 681.533576][T12359] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 681.542893][T12359] f81232 6-1:0.73: device disconnected [ 682.161924][T12357] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 682.401930][T12357] usb 6-1: Using ep0 maxpacket: 8 [ 682.521999][T12357] usb 6-1: config 0 has an invalid interface number: 73 but max is 0 [ 682.530219][T12357] usb 6-1: config 0 has no interface number 0 [ 682.536544][T12357] usb 6-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=d7.6d [ 682.545698][T12357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.556127][T12357] usb 6-1: config 0 descriptor?? [ 682.592930][T12357] hub 6-1:0.73: ignoring external hub [ 682.599959][T12357] f81232 6-1:0.73: f81232 converter detected [ 682.610860][T12357] usb 6-1: f81232 converter now attached to ttyUSB0 [ 682.912206][T12357] usb 6-1: USB disconnect, device number 23 [ 682.920304][T12357] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 682.929138][T12357] f81232 6-1:0.73: device disconnected 10:39:50 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x800003) 10:39:50 executing program 4: memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="dbcf66e3bbc83a1741ee78000001000000ce680000bf250500b53f019c6150bcef00"/43], 0x11) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x800fe) sendfile(r3, r4, 0x0, 0x8000fffffffe) 10:39:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 10:39:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@setlink={0x50, 0x13, 0x311, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_IFALIAS={0x14, 0x28, 'veth0_to_team\x00'}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x50}}, 0x0) 10:39:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:39:50 executing program 1: memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="dbcf66e3bbc83a1741ee78000001000000ce680000bf250500b53f019c6150bcef00"/43], 0x11) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x800fe) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 683.380967][T22210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:39:50 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000008800)=[{0x3e8, 0x0, 0x0}], 0x4924924924927b1, 0x0) [ 683.461239][T22217] netlink: 'syz-executor.5': attribute type 40 has an invalid length. [ 683.534502][T22217] netlink: 'syz-executor.5': attribute type 40 has an invalid length. 10:39:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0x198], [0xc1]}) 10:39:50 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, '+'}]}, 0x12) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:39:50 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, '+'}]}, 0x12) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:39:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804813000000460001070000001419000a000f000000f00003f5000000000000ef38bf461e59d7", 0x39}], 0x1) [ 683.867240][T22243] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 683.875723][T22243] bond0: (slave caif0): ether type (0) is different from other slaves (1), can not enslave it 10:39:51 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, '+'}]}, 0x12) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:39:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804813000000460001070000001419000a000f000000f00003f5000000000000ef38bf461e59d7", 0x39}], 0x1) [ 684.117471][T22252] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 684.126012][T22252] bond0: (slave caif0): ether type (0) is different from other slaves (1), can not enslave it 10:39:51 executing program 4: memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="dbcf66e3bbc83a1741ee78000001000000ce680000bf250500b53f019c6150bcef00"/43], 0x11) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x800fe) sendfile(r3, r4, 0x0, 0x8000fffffffe) 10:39:51 executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x2, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @remote}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @rand_addr="6c77d78d61d2e32802a6eb497fb696e5", @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 10:39:51 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000280)={0x10000000000000a, 0x2000027fffffff}) 10:39:51 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, '#! '}, {0x20, '+'}]}, 0x12) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:39:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804813000000460001070000001419000a000f000000f00003f5000000000000ef38bf461e59d7", 0x39}], 0x1) 10:39:51 executing program 1: memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="dbcf66e3bbc83a1741ee78000001000000ce680000bf250500b53f019c6150bcef00"/43], 0x11) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x800fe) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 684.362718][T22264] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 684.371006][T22264] bond0: (slave caif0): ether type (0) is different from other slaves (1), can not enslave it 10:39:51 executing program 3: unshare(0x20000400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getown(r0, 0x9) 10:39:51 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x8401) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="008414158c2488a792a792ceb1c1addb64483957a920b5fe89e5197c0640e23e958008f157efd43313252c33f8134c4abef40e51f72d51199d22ca0319fa9159c4073cbad163ef463b85ee41210dea743e003bd70808b4a5c5604837bb549036916787c57121f5774fec4d24d0305c66250764408b479401eb0f9563fe54ba57b9ee4561fbafcc62d200562dfce83dfa101c397af44f90ffe68e011bde09aefc520c0f6e0b4e2db265a6c30609bdc5d68dc439c9b4b5a5b87987d99cccdecf3ed9323a11249305d21e507f465852683d72ac2a9eb72a001fed9a178cc074b00d839383363eda1f4caede13feaf", 0xed}, {&(0x7f0000001240)="becc9f749460", 0xfffffd1e}, {&(0x7f00000002c0)="32749673763d341daf83186cd9f1744513002d613df85dd5c5f99019b15ef5729cc108c01a0373f5d772af901020ee8385836564c05939f28e412b30440fd3b45736b45b5b9e242e61e7d97831fd414b1c6266146b41974b4878aba83d9fdb466cb7292b15ac152ac08020762a2e17d094086669dc77ed3868f98dafa3a2547ff09e5ad3ed88baf5cf2d515d177908cc2ae60259a02b893b3f307870b24b798e6d86d5e059f04d87a838a54253b3dd04fd53563259ac1ea347faf110c4e0f4e117c27944b68dbf48bb2711736d9f53a68713c142b40a9c115f225d88d512cf7bbbc858c16e76942f5779eecc669b3742545589a81e971f57b715f0bef77b4ea3e9615c8e4d041bc4f4cdeb75406828347a15729b3320696cee7aa777a2034b73c8d72445f9240d381545e83ae95e0afd49c51d6e777275bf0e279338c1f7329f9f345666cbda05369df5de2368f8eafcdb33f8543c2f0c50d21a8ac1c41e054f7841add46859421c5f5d04cf31e53282d83b69ead8f1105d631729412c29b7fcea110ea74c1b0c6e405a517d84d7b67aab23966e1f3746ae0321247faf31172a972e00fdebf9ef9177f901dc5ff887fe7daea7e3cbce2e4dc28041adf7f9783e4d350eaac28f3e862b0c6c13063c30e02e3b92aaa11db2c7adfbb358086f8a623ceb1115fd0bc48b57c11d0c5438e5cfd1e9c440fe6986b169d26d3e5c6681c5436f3392561ae92b6726203fecaae1f466f06b19542392e0febe82a01bf8e2b00e17e1516b71fa9ca6ff9f3a7d74eb7094082f77ad3696b963b4fd123a094ca415d586921e84f6094344666d580da610b39de45093d198d2d6118a3e9418ff1d7071a66e91714dbbd4eb8764b33864194fa5a3ebccc52f0715ef77b52d2758cf44e1fb83ee4ce6e8d013a83a611aac3c7f4f75ce01850d9ab06c8a968c578c0db1607ff10c4366a896dc99557cf07c348dfd426c3e8344380922a23e7c3b3ff4b6a6d9bd8fe0f8efcee3f66cdb0ec90c46b39feb21b0c8a67fb8bb10b55abc207e890e80325b1282f4ff59cbd2103cb4493e45b240864603bbd031d058cec65255a7c91e314bf02fe90e14c1f13a6a7e1999a18c3f75be31255936e51fe08bf8b7e03421a7146b4d070f31f0406e9f6ac3cf5a965c07835abe0387754c4cf0a638ecc99eed4166ee33518163ad714ba0f99e7da42a3ddcad1e33035ee9a6b18f720f2c3155ae968c9fc286caa7bc4d7932e20dda8ffbdd3b367b632967feac2cf073ea9c0fdafe454cfe2a61143724a195614f72f5640bf50f634b693193ba4b71d6b541a907bcaa908f8ff38f77536841a9b4bb21189439c3219d5d74823ff4753ad2aac5809fa4960ef2d423afbd182f1f91b2aea03e5c07f8252295920bb31d555beb062d1e0800d13540e76bd5674314f72db7790a16a3197e08fce93bd4e2493b30ab3017bdfdbdac91c9e0cd4400fd8b95ec6099b3af2bbb0cba6979b7b42844641c7efbe93d926c3c224fc1b933498ad63f59db1849ba683a60cad0db55d5e457a12092db1bdc10dcad311cc28ffc2dc80874f2d0c0a18fddca2f378e0f2d31d4bf146943d43e73ef08cb9b187fdd298155e78f954a2263a2c28a6c5b911434784b8a98833bd6b5e09e526e403420eb98d3a69461f94911646a60dc3a761bf46df7eb6d4f3a76d1a377d7a46de95627491341d992bb1ace230b8e95c3dae718462d6fd468244a855096d89b8f9919259f70f588b5940dc41ffb7b7e02f92ba380fe95880e6faf32873d42cf8b0393245d7113c8cf748b68c297747986c8c30604711e21a1f33d6ffaf9791ec8d125b57ab3f06921e0a0fb29cc08d483ebdaba1a75e54f6897a697971a8476bf6b53136514e5247ba1f9a22297de703f4341c9bd3152dbcf17a2853a4b9d7f191a9a8725dde8244eab4dac68ab74847169591b5e14f9a3dcded563801834ae5128b1ba714a7d458f9c0a2493d093c352f8b4ffd095c03496a47c13a31062f4302bebaa9080cfe45687c34b022d8ef9a62dfebfd8d93a94c7b27badbed5b601d6d9f4c01eabd3998b833dd4bb4a2966167c16887cf8a9ce795542e475e05807c8a6e7c1a7420aaa0be48774ed4f42048b0384b5357a6e3ad4b3be6fd957201c1363489e99e40a8b9872bb19631bf78e4062b9d4cd642ebd595e047ff73aeadcba307d7f281d0557e5c2909ae37c386d9303a4cf7bfb5395ff2fd2741fd88a2003a37c8c69bbb3415660bcc92d2926389415c63f1a9333ed254dd739898e6c46b4543b6f81363c687fe995ab82248671626356cb3256f5a6210b58df754878b8856ff5ef07beadac53089ae11eea91eb62796c15d7ef45668221084746e3914df69c838a3e2a71d97d500db6736de13e4a0510424cb012ab0032989ff834495189a35ac6c74ccc0a5469425877ee0d4410030bc8803214176dcaf62ddd86e541e6f3a598dd64873e189cb8e4a7ff4db499dcda600d31da8ee5e19968133fbd8339acee1c89db0ed0331dc423d93a335a932f57b695845259c50e435f913abf6578978902e80f3ec179732c278a85cfaeb6a248c4ac97f26e7c3047e131bc17c707ad284440708308290df4f26f9b568c192f46fc8bfe43c2b10692440770f9b23c273924b12d5c0262b0b59ad0fd07f30e775b3fe19f58dd5bbc5890a4fb424f438718d07f23bf1786c20781ac7e1dfca35f2a0f65ec0e1644faa031fca2605056b68dd22abd14c1087bc32bde2553d191386540bc900540f020d6480210edfb58e58c361f34d561564edf004a6cb8bbbbe3beb9dac0f0a9e929ccc370ab9c5e6dc2be7c13fe77a3b378ee8afe7049383a9af2752d9d981de395af5bf509f47ddf84876be0dd153116a92d9c95a23963b0376cc6f6c36fd682afca83f9903b0a3387ef7661691edddc02e3ffa9baa1d5e18f1f05fa91ddb716bc57a208e38d97559e64ef06b742fd5203a4353173c0a3ca8c625ebeafaa57bbe87ccd4a90b86af062cde0e19689dc346c20f55fffff3a14f5fc0788e0ebb5616730acd5badac1238cf6835de6f73d9fec573b0cdc68d652e75694ccd2b8bf475937265a369e209f20ec93cb182e657601c3ce5b22dbf5661df5a7665daa390ee0b44db94b6b0826cca8e777f9f9852a86cb586c88824f5eafb0bf8c15dbf76caf2d5549c3253d2bb0d2c578886d44b2830beaad0197fed8d9d7966c5864fac4bcbf356e8fbe40d4bd25309f9e77166ef14c23c9d6473e83f0c6d31bf3881664ae4826d0dff3c2070bfe3313c3cdc43fc407427106d44b0d3f5070a876808ca8d330c0868ffb87c88727fc6982d0f653cfa0fea2559826742ffe7221e14528dfec6bb875eef7fa50b9a8ec39cc7fde75800b56077eea4b994818636433f04fea78cbb2301e6477d19df7e516c6a164298d8fba31a46990636b50a31a4f55736ee7ce89f724a470837b2c97044fdbe2cc3b4ca6c1b1c2b850e61d77920fdbdf6c0945ca3e54d4171da041a7d4c2600deac37b844ac03e7a7f810c8987cfd6544282167053afd7c5d6778030e34c2c62b97331d9d366bfc99d55c037b2869fb13e52b5078d0e52eeb465ab025380196d7588e79e5ac1614f793afee2c1a5df673745394e34b6d1a0241026e608f154df6443af9393899baea6c5c4d9f4046db6ee0b8778ed0d64420dccbb636e201a3404975e2e31cfc73521bbfd559a029fb48b032b960896d378aafb9bdf4f37135cd10c88015aae52a731bc7f9fafa9a2028d3f0304e642881ed389be7acd8311cd51ce77746cd1f44506f0a3f277f37eb821802f979ebe3cbe2ec75b565a5c4ca777131cfffdb8c86ffce6d9ea46afa697cb480897367a1bb31b1ec6ff0e1ceb104b8cfea4c93e8ee80c1aa7ca87c078c1751b6f503f24816206760569707e0d764099bd234dbc862aad2c0b4c039c0b74bcf09a8b0f72875fea89e88b50e0eb15b20221112a6903b90baa0c125ffeba274e2ad5a0eac6ca881b212175dbba2b0aee029da6d7b6052f4fd5d0b2fbe3e8c18f9198f957b8c6c65f788b3c6261491f3af9f6357a850c3c1be56328bcd31bdff0c4cdccbef0109cf347ec9cf411190ea6d726f46c4fd5566870cfb7d3d84d770a1a3258e14d7159b330f093637c6ee1c69582750bbb8e965d24f967f04d0fb9a1828ffd036858bdcd2dec0d7448e9d287c27fd2ec36e5b1ee2d397d38a0842b93e2cb91eef4b21828a5d213b7c58d1b17d79e101521c5b5fb33812b32fe6bd688173f2fc32eb5608604ffbe912925a14f04d5a1f5a8b5e5ce561a20b8c5f27b5e0f22b547f12c0aa5d9c4109bde7ed7af08975c3dd22bd74607007b9a2bbf571ef8cd5f66ff8020594d51e1d5c00ca5ebc9af20612840490a28aaa844b20f6d8c0472f155af7cdba6cf05b3ff2845a135c06a6c5f1682631c1faf3ec201138772ef018443cd73c1a2c7e8b6a9d6409167d863278e203f89d6f129ad42d3795053df265bab3deff9668e57d7a828b8b1bbbaadc6e17cfc171f7709e498d0335ced4e0e6f826ffd9c63198768880a821451ffb0c1cdcb9d7a78ca82860f14fc75d5b2588769bfaf8fac890d89b44bfc56381be42540409ce4d5a84482bc59c71b5b1bdc84529e3f993fbaad4faf44cbbda4008cab00b774bc5029f776b20fe146227f9b74603267e3ad2aad747d056c698e7b0e206e106129f17ec40abf41764a20b89fced6588646f60c060f97853b0be41d9d979ef5e88d3a0117d9a24d8181c05a1aee44e28b47c00f911b27522950074a28bfaddcd92a08b21b094f0a9c0191d04c7adee7766cec05aaff1eae17c68a93012bed47867e6bafd948b564fd8fbb3c794dee58a85babf76604686edd6753f186fd11b06d3fce364153bb90e9474354b3057fa8435b8fabb46b46e1ef6e56e48388f58fac2082c641443ba3e973d91ecb6fb1de6791c1646776982923a34dfca7c4d63e1617007c40e06201c307706b74c573b19a4f15c53ba7ff2b3b8eb0dd90e73fe1359dbd39219e9cbefe6c3f34fe9013587441ea3d366cbe9ce16908a15188ab45e35511e7a7e5150231004c5a0dfc14212889cec4927bd04c5d8d21bec8b5ef9c0e817a7738390d025bc422234c60c553556e9139c0a802c7efd08596fc0f97fac8599dda304ae019cd885f2a006fb1dae67e03ccc2b6e8cee24c0a292c894d09bfbc74ed80452bde0636be57f3672a6e67e0cbbd91ae08c109e8596a5cda762fa1b28355a0abb777db6a6cc5e2dbac8e8c140ed4ea407b01311f07aec0131b010c607b3fea776d5a69625e5768c75668504ee06a7dea1a7c34504b3c46598ff1673d82ea12a94a1179768273575202c6387ca55753e8081ab37fc11d31564270c9bac71eaad478328829ddbe4d12573d7d98b645a1a9a81fd34f6bf0f5cb5bb1d2ed0b6dc44681bb11b71b6029ba485a", 0xf0d}], 0x3) ioctl$int_in(r0, 0x80000000005000, 0x0) 10:39:51 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x105400, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x40000031, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 10:39:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x1}, 0x14}}, 0x0) 10:39:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab553fec9424054ae27d04008a000000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)=[{0x10}, {0x10, 0x117, 0x4}], 0x20}, 0x0) 10:39:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00804813000000460001070000001419000a000f000000f00003f5000000000000ef38bf461e59d7", 0x39}], 0x1) [ 685.184824][ C1] net_ratelimit: 24 callbacks suppressed [ 685.184846][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 685.196787][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 685.203074][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 685.209179][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 685.220541][T22297] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 685.228905][T22297] bond0: (slave caif0): ether type (0) is different from other slaves (1), can not enslave it 10:39:52 executing program 4: memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="dbcf66e3bbc83a1741ee78000001000000ce680000bf250500b53f019c6150bcef00"/43], 0x11) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x800fe) sendfile(r3, r4, 0x0, 0x8000fffffffe) 10:39:52 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x23) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:39:52 executing program 2: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f0000000080)={0x2000019980330}, &(0x7f0000000000)) r1 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000000900000000000000000000000000b2f2043b4a7b"], 0x19}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) 10:39:52 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x8401) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="008414158c2488a792a792ceb1c1addb64483957a920b5fe89e5197c0640e23e958008f157efd43313252c33f8134c4abef40e51f72d51199d22ca0319fa9159c4073cbad163ef463b85ee41210dea743e003bd70808b4a5c5604837bb549036916787c57121f5774fec4d24d0305c66250764408b479401eb0f9563fe54ba57b9ee4561fbafcc62d200562dfce83dfa101c397af44f90ffe68e011bde09aefc520c0f6e0b4e2db265a6c30609bdc5d68dc439c9b4b5a5b87987d99cccdecf3ed9323a11249305d21e507f465852683d72ac2a9eb72a001fed9a178cc074b00d839383363eda1f4caede13feaf", 0xed}, {&(0x7f0000001240)="becc9f749460", 0xfffffd1e}, {&(0x7f00000002c0)="32749673763d341daf83186cd9f1744513002d613df85dd5c5f99019b15ef5729cc108c01a0373f5d772af901020ee8385836564c05939f28e412b30440fd3b45736b45b5b9e242e61e7d97831fd414b1c6266146b41974b4878aba83d9fdb466cb7292b15ac152ac08020762a2e17d094086669dc77ed3868f98dafa3a2547ff09e5ad3ed88baf5cf2d515d177908cc2ae60259a02b893b3f307870b24b798e6d86d5e059f04d87a838a54253b3dd04fd53563259ac1ea347faf110c4e0f4e117c27944b68dbf48bb2711736d9f53a68713c142b40a9c115f225d88d512cf7bbbc858c16e76942f5779eecc669b3742545589a81e971f57b715f0bef77b4ea3e9615c8e4d041bc4f4cdeb75406828347a15729b3320696cee7aa777a2034b73c8d72445f9240d381545e83ae95e0afd49c51d6e777275bf0e279338c1f7329f9f345666cbda05369df5de2368f8eafcdb33f8543c2f0c50d21a8ac1c41e054f7841add46859421c5f5d04cf31e53282d83b69ead8f1105d631729412c29b7fcea110ea74c1b0c6e405a517d84d7b67aab23966e1f3746ae0321247faf31172a972e00fdebf9ef9177f901dc5ff887fe7daea7e3cbce2e4dc28041adf7f9783e4d350eaac28f3e862b0c6c13063c30e02e3b92aaa11db2c7adfbb358086f8a623ceb1115fd0bc48b57c11d0c5438e5cfd1e9c440fe6986b169d26d3e5c6681c5436f3392561ae92b6726203fecaae1f466f06b19542392e0febe82a01bf8e2b00e17e1516b71fa9ca6ff9f3a7d74eb7094082f77ad3696b963b4fd123a094ca415d586921e84f6094344666d580da610b39de45093d198d2d6118a3e9418ff1d7071a66e91714dbbd4eb8764b33864194fa5a3ebccc52f0715ef77b52d2758cf44e1fb83ee4ce6e8d013a83a611aac3c7f4f75ce01850d9ab06c8a968c578c0db1607ff10c4366a896dc99557cf07c348dfd426c3e8344380922a23e7c3b3ff4b6a6d9bd8fe0f8efcee3f66cdb0ec90c46b39feb21b0c8a67fb8bb10b55abc207e890e80325b1282f4ff59cbd2103cb4493e45b240864603bbd031d058cec65255a7c91e314bf02fe90e14c1f13a6a7e1999a18c3f75be31255936e51fe08bf8b7e03421a7146b4d070f31f0406e9f6ac3cf5a965c07835abe0387754c4cf0a638ecc99eed4166ee33518163ad714ba0f99e7da42a3ddcad1e33035ee9a6b18f720f2c3155ae968c9fc286caa7bc4d7932e20dda8ffbdd3b367b632967feac2cf073ea9c0fdafe454cfe2a61143724a195614f72f5640bf50f634b693193ba4b71d6b541a907bcaa908f8ff38f77536841a9b4bb21189439c3219d5d74823ff4753ad2aac5809fa4960ef2d423afbd182f1f91b2aea03e5c07f8252295920bb31d555beb062d1e0800d13540e76bd5674314f72db7790a16a3197e08fce93bd4e2493b30ab3017bdfdbdac91c9e0cd4400fd8b95ec6099b3af2bbb0cba6979b7b42844641c7efbe93d926c3c224fc1b933498ad63f59db1849ba683a60cad0db55d5e457a12092db1bdc10dcad311cc28ffc2dc80874f2d0c0a18fddca2f378e0f2d31d4bf146943d43e73ef08cb9b187fdd298155e78f954a2263a2c28a6c5b911434784b8a98833bd6b5e09e526e403420eb98d3a69461f94911646a60dc3a761bf46df7eb6d4f3a76d1a377d7a46de95627491341d992bb1ace230b8e95c3dae718462d6fd468244a855096d89b8f9919259f70f588b5940dc41ffb7b7e02f92ba380fe95880e6faf32873d42cf8b0393245d7113c8cf748b68c297747986c8c30604711e21a1f33d6ffaf9791ec8d125b57ab3f06921e0a0fb29cc08d483ebdaba1a75e54f6897a697971a8476bf6b53136514e5247ba1f9a22297de703f4341c9bd3152dbcf17a2853a4b9d7f191a9a8725dde8244eab4dac68ab74847169591b5e14f9a3dcded563801834ae5128b1ba714a7d458f9c0a2493d093c352f8b4ffd095c03496a47c13a31062f4302bebaa9080cfe45687c34b022d8ef9a62dfebfd8d93a94c7b27badbed5b601d6d9f4c01eabd3998b833dd4bb4a2966167c16887cf8a9ce795542e475e05807c8a6e7c1a7420aaa0be48774ed4f42048b0384b5357a6e3ad4b3be6fd957201c1363489e99e40a8b9872bb19631bf78e4062b9d4cd642ebd595e047ff73aeadcba307d7f281d0557e5c2909ae37c386d9303a4cf7bfb5395ff2fd2741fd88a2003a37c8c69bbb3415660bcc92d2926389415c63f1a9333ed254dd739898e6c46b4543b6f81363c687fe995ab82248671626356cb3256f5a6210b58df754878b8856ff5ef07beadac53089ae11eea91eb62796c15d7ef45668221084746e3914df69c838a3e2a71d97d500db6736de13e4a0510424cb012ab0032989ff834495189a35ac6c74ccc0a5469425877ee0d4410030bc8803214176dcaf62ddd86e541e6f3a598dd64873e189cb8e4a7ff4db499dcda600d31da8ee5e19968133fbd8339acee1c89db0ed0331dc423d93a335a932f57b695845259c50e435f913abf6578978902e80f3ec179732c278a85cfaeb6a248c4ac97f26e7c3047e131bc17c707ad284440708308290df4f26f9b568c192f46fc8bfe43c2b10692440770f9b23c273924b12d5c0262b0b59ad0fd07f30e775b3fe19f58dd5bbc5890a4fb424f438718d07f23bf1786c20781ac7e1dfca35f2a0f65ec0e1644faa031fca2605056b68dd22abd14c1087bc32bde2553d191386540bc900540f020d6480210edfb58e58c361f34d561564edf004a6cb8bbbbe3beb9dac0f0a9e929ccc370ab9c5e6dc2be7c13fe77a3b378ee8afe7049383a9af2752d9d981de395af5bf509f47ddf84876be0dd153116a92d9c95a23963b0376cc6f6c36fd682afca83f9903b0a3387ef7661691edddc02e3ffa9baa1d5e18f1f05fa91ddb716bc57a208e38d97559e64ef06b742fd5203a4353173c0a3ca8c625ebeafaa57bbe87ccd4a90b86af062cde0e19689dc346c20f55fffff3a14f5fc0788e0ebb5616730acd5badac1238cf6835de6f73d9fec573b0cdc68d652e75694ccd2b8bf475937265a369e209f20ec93cb182e657601c3ce5b22dbf5661df5a7665daa390ee0b44db94b6b0826cca8e777f9f9852a86cb586c88824f5eafb0bf8c15dbf76caf2d5549c3253d2bb0d2c578886d44b2830beaad0197fed8d9d7966c5864fac4bcbf356e8fbe40d4bd25309f9e77166ef14c23c9d6473e83f0c6d31bf3881664ae4826d0dff3c2070bfe3313c3cdc43fc407427106d44b0d3f5070a876808ca8d330c0868ffb87c88727fc6982d0f653cfa0fea2559826742ffe7221e14528dfec6bb875eef7fa50b9a8ec39cc7fde75800b56077eea4b994818636433f04fea78cbb2301e6477d19df7e516c6a164298d8fba31a46990636b50a31a4f55736ee7ce89f724a470837b2c97044fdbe2cc3b4ca6c1b1c2b850e61d77920fdbdf6c0945ca3e54d4171da041a7d4c2600deac37b844ac03e7a7f810c8987cfd6544282167053afd7c5d6778030e34c2c62b97331d9d366bfc99d55c037b2869fb13e52b5078d0e52eeb465ab025380196d7588e79e5ac1614f793afee2c1a5df673745394e34b6d1a0241026e608f154df6443af9393899baea6c5c4d9f4046db6ee0b8778ed0d64420dccbb636e201a3404975e2e31cfc73521bbfd559a029fb48b032b960896d378aafb9bdf4f37135cd10c88015aae52a731bc7f9fafa9a2028d3f0304e642881ed389be7acd8311cd51ce77746cd1f44506f0a3f277f37eb821802f979ebe3cbe2ec75b565a5c4ca777131cfffdb8c86ffce6d9ea46afa697cb480897367a1bb31b1ec6ff0e1ceb104b8cfea4c93e8ee80c1aa7ca87c078c1751b6f503f24816206760569707e0d764099bd234dbc862aad2c0b4c039c0b74bcf09a8b0f72875fea89e88b50e0eb15b20221112a6903b90baa0c125ffeba274e2ad5a0eac6ca881b212175dbba2b0aee029da6d7b6052f4fd5d0b2fbe3e8c18f9198f957b8c6c65f788b3c6261491f3af9f6357a850c3c1be56328bcd31bdff0c4cdccbef0109cf347ec9cf411190ea6d726f46c4fd5566870cfb7d3d84d770a1a3258e14d7159b330f093637c6ee1c69582750bbb8e965d24f967f04d0fb9a1828ffd036858bdcd2dec0d7448e9d287c27fd2ec36e5b1ee2d397d38a0842b93e2cb91eef4b21828a5d213b7c58d1b17d79e101521c5b5fb33812b32fe6bd688173f2fc32eb5608604ffbe912925a14f04d5a1f5a8b5e5ce561a20b8c5f27b5e0f22b547f12c0aa5d9c4109bde7ed7af08975c3dd22bd74607007b9a2bbf571ef8cd5f66ff8020594d51e1d5c00ca5ebc9af20612840490a28aaa844b20f6d8c0472f155af7cdba6cf05b3ff2845a135c06a6c5f1682631c1faf3ec201138772ef018443cd73c1a2c7e8b6a9d6409167d863278e203f89d6f129ad42d3795053df265bab3deff9668e57d7a828b8b1bbbaadc6e17cfc171f7709e498d0335ced4e0e6f826ffd9c63198768880a821451ffb0c1cdcb9d7a78ca82860f14fc75d5b2588769bfaf8fac890d89b44bfc56381be42540409ce4d5a84482bc59c71b5b1bdc84529e3f993fbaad4faf44cbbda4008cab00b774bc5029f776b20fe146227f9b74603267e3ad2aad747d056c698e7b0e206e106129f17ec40abf41764a20b89fced6588646f60c060f97853b0be41d9d979ef5e88d3a0117d9a24d8181c05a1aee44e28b47c00f911b27522950074a28bfaddcd92a08b21b094f0a9c0191d04c7adee7766cec05aaff1eae17c68a93012bed47867e6bafd948b564fd8fbb3c794dee58a85babf76604686edd6753f186fd11b06d3fce364153bb90e9474354b3057fa8435b8fabb46b46e1ef6e56e48388f58fac2082c641443ba3e973d91ecb6fb1de6791c1646776982923a34dfca7c4d63e1617007c40e06201c307706b74c573b19a4f15c53ba7ff2b3b8eb0dd90e73fe1359dbd39219e9cbefe6c3f34fe9013587441ea3d366cbe9ce16908a15188ab45e35511e7a7e5150231004c5a0dfc14212889cec4927bd04c5d8d21bec8b5ef9c0e817a7738390d025bc422234c60c553556e9139c0a802c7efd08596fc0f97fac8599dda304ae019cd885f2a006fb1dae67e03ccc2b6e8cee24c0a292c894d09bfbc74ed80452bde0636be57f3672a6e67e0cbbd91ae08c109e8596a5cda762fa1b28355a0abb777db6a6cc5e2dbac8e8c140ed4ea407b01311f07aec0131b010c607b3fea776d5a69625e5768c75668504ee06a7dea1a7c34504b3c46598ff1673d82ea12a94a1179768273575202c6387ca55753e8081ab37fc11d31564270c9bac71eaad478328829ddbe4d12573d7d98b645a1a9a81fd34f6bf0f5cb5bb1d2ed0b6dc44681bb11b71b6029ba485a", 0xf0d}], 0x3) ioctl$int_in(r0, 0x80000000005000, 0x0) 10:39:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x8401) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="008414158c2488a792a792ceb1c1addb64483957a920b5fe89e5197c0640e23e958008f157efd43313252c33f8134c4abef40e51f72d51199d22ca0319fa9159c4073cbad163ef463b85ee41210dea743e003bd70808b4a5c5604837bb549036916787c57121f5774fec4d24d0305c66250764408b479401eb0f9563fe54ba57b9ee4561fbafcc62d200562dfce83dfa101c397af44f90ffe68e011bde09aefc520c0f6e0b4e2db265a6c30609bdc5d68dc439c9b4b5a5b87987d99cccdecf3ed9323a11249305d21e507f465852683d72ac2a9eb72a001fed9a178cc074b00d839383363eda1f4caede13feaf", 0xed}, {&(0x7f0000001240)="becc9f749460", 0xfffffd1e}, {&(0x7f00000002c0)="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", 0xf0d}], 0x3) ioctl$int_in(r0, 0x80000000005000, 0x0) 10:39:52 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) [ 686.572327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 686.578617][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 686.585132][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 686.591347][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 686.597815][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 686.604066][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:39:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000020000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) dup2(r0, r1) 10:39:54 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 10:39:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) ioctl$TCFLSH(r0, 0x5411, 0x70f000) 10:39:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) 10:39:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000020000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) dup2(r0, r1) 10:39:54 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000068450c202104810480280000c44709022900010000000009040000000202ff00052406000005242300000d240f26f7840b99d7682e1d933f6754f56846010000000000000000009b3aa33a37c437eb4778d8562ae66df79551d93b49bb"], 0x0) 10:39:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x8401) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="008414158c2488a792a792ceb1c1addb64483957a920b5fe89e5197c0640e23e958008f157efd43313252c33f8134c4abef40e51f72d51199d22ca0319fa9159c4073cbad163ef463b85ee41210dea743e003bd70808b4a5c5604837bb549036916787c57121f5774fec4d24d0305c66250764408b479401eb0f9563fe54ba57b9ee4561fbafcc62d200562dfce83dfa101c397af44f90ffe68e011bde09aefc520c0f6e0b4e2db265a6c30609bdc5d68dc439c9b4b5a5b87987d99cccdecf3ed9323a11249305d21e507f465852683d72ac2a9eb72a001fed9a178cc074b00d839383363eda1f4caede13feaf", 0xed}, {&(0x7f0000001240)="becc9f749460", 0xfffffd1e}, {&(0x7f00000002c0)="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", 0xf0d}], 0x3) ioctl$int_in(r0, 0x80000000005000, 0x0) 10:39:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000020000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) dup2(r0, r1) 10:39:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) 10:39:54 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x8401) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="008414158c2488a792a792ceb1c1addb64483957a920b5fe89e5197c0640e23e958008f157efd43313252c33f8134c4abef40e51f72d51199d22ca0319fa9159c4073cbad163ef463b85ee41210dea743e003bd70808b4a5c5604837bb549036916787c57121f5774fec4d24d0305c66250764408b479401eb0f9563fe54ba57b9ee4561fbafcc62d200562dfce83dfa101c397af44f90ffe68e011bde09aefc520c0f6e0b4e2db265a6c30609bdc5d68dc439c9b4b5a5b87987d99cccdecf3ed9323a11249305d21e507f465852683d72ac2a9eb72a001fed9a178cc074b00d839383363eda1f4caede13feaf", 0xed}, {&(0x7f0000001240)="becc9f749460", 0xfffffd1e}, {&(0x7f00000002c0)="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", 0xf0d}], 0x3) ioctl$int_in(r0, 0x80000000005000, 0x0) 10:39:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) 10:39:54 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) [ 687.783805][T12359] usb 5-1: new high-speed USB device number 32 using dummy_hcd 10:39:56 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000020000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) dup2(r0, r1) 10:39:56 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 10:39:56 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 10:39:56 executing program 3: r0 = syz_open_dev$video(&(0x7f00000029c0)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x32314142, 0x280, 0x168}) [ 689.141992][T12359] usb 5-1: Using ep0 maxpacket: 32 [ 689.184091][T12359] usb 5-1: too many configurations: 71, using maximum allowed: 8 10:39:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x8401) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="008414158c2488a792a792ceb1c1addb64483957a920b5fe89e5197c0640e23e958008f157efd43313252c33f8134c4abef40e51f72d51199d22ca0319fa9159c4073cbad163ef463b85ee41210dea743e003bd70808b4a5c5604837bb549036916787c57121f5774fec4d24d0305c66250764408b479401eb0f9563fe54ba57b9ee4561fbafcc62d200562dfce83dfa101c397af44f90ffe68e011bde09aefc520c0f6e0b4e2db265a6c30609bdc5d68dc439c9b4b5a5b87987d99cccdecf3ed9323a11249305d21e507f465852683d72ac2a9eb72a001fed9a178cc074b00d839383363eda1f4caede13feaf", 0xed}, {&(0x7f0000001240)="becc9f749460", 0xfffffd1e}, {&(0x7f00000002c0)="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", 0xf0d}], 0x3) ioctl$int_in(r0, 0x80000000005000, 0x0) [ 690.092174][T12359] usb 5-1: New USB device found, idVendor=0421, idProduct=0481, bcdDevice=28.80 [ 690.101352][T12359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=196 [ 690.109732][T12359] usb 5-1: SerialNumber: syz [ 690.115598][T12359] usb 5-1: config 0 descriptor?? [ 690.154023][T12359] usb 5-1: bad CDC descriptors [ 690.159779][T12359] usb 5-1: bad CDC descriptors [ 690.165438][T12359] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 690.173449][T12359] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 690.179998][T12359] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 690.354912][T12359] usb 5-1: USB disconnect, device number 32 [ 690.732088][ C0] net_ratelimit: 18 callbacks suppressed [ 690.732102][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.743968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 690.750170][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.756173][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 690.762317][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 690.768391][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 691.121956][T12359] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 691.132144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 691.138164][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 691.361861][T12359] usb 5-1: Using ep0 maxpacket: 32 [ 691.372193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 691.378230][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 691.402140][T12359] usb 5-1: too many configurations: 71, using maximum allowed: 8 10:39:58 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 10:39:58 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x8401) writev(r0, &(0x7f00000012c0)=[{&(0x7f00000001c0)="008414158c2488a792a792ceb1c1addb64483957a920b5fe89e5197c0640e23e958008f157efd43313252c33f8134c4abef40e51f72d51199d22ca0319fa9159c4073cbad163ef463b85ee41210dea743e003bd70808b4a5c5604837bb549036916787c57121f5774fec4d24d0305c66250764408b479401eb0f9563fe54ba57b9ee4561fbafcc62d200562dfce83dfa101c397af44f90ffe68e011bde09aefc520c0f6e0b4e2db265a6c30609bdc5d68dc439c9b4b5a5b87987d99cccdecf3ed9323a11249305d21e507f465852683d72ac2a9eb72a001fed9a178cc074b00d839383363eda1f4caede13feaf", 0xed}, {&(0x7f0000001240)="becc9f749460", 0xfffffd1e}, {&(0x7f00000002c0)="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", 0xf0d}], 0x3) ioctl$int_in(r0, 0x80000000005000, 0x0) 10:39:58 executing program 2: unshare(0x8000400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 10:39:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x100000, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "968dc2ce8eb4914b099c46f7313f860900fe5033b2e55b7f98148c99b974ea85"}) 10:39:58 executing program 3: r0 = syz_open_dev$video(&(0x7f00000029c0)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x32314142, 0x280, 0x168}) 10:39:58 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 10:39:59 executing program 3: r0 = syz_open_dev$video(&(0x7f00000029c0)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x32314142, 0x280, 0x168}) [ 691.933775][T12359] usb 5-1: unable to read config index 5 descriptor/start: -71 [ 691.941480][T12359] usb 5-1: can't read configurations, error -71 10:39:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x193) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4(0xffffffffffffffff, &(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000001, 0x0, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:39:59 executing program 3: r0 = syz_open_dev$video(&(0x7f00000029c0)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x32314142, 0x280, 0x168}) [ 692.108806][T22414] kvm_hv_set_msr: 526 callbacks suppressed [ 692.108847][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006a data 0x4d00000000f [ 692.256415][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000038 data 0x4d00000000f 10:39:59 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)=@ll={0x1e, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x2, 0x0) 10:39:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000000010100000006000000000002000000040002000c0001000800010000000000"], 0x24}}, 0x0) [ 692.297920][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000006 data 0x4d00000000f [ 692.328557][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003e data 0x4d00000000f [ 692.365346][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000000c data 0x4d00000000f [ 692.376440][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000076 data 0x4d00000000f [ 692.388357][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000044 data 0x4d00000000f [ 692.402099][T12359] usb 5-1: new high-speed USB device number 34 using dummy_hcd 10:39:59 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)=@ll={0x1e, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x2, 0x0) [ 692.411641][T22425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 692.418567][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000012 data 0x4d00000000f [ 692.421429][T22425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 692.436938][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007c data 0x4d00000000f [ 692.451981][T22414] kvm [22411]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000004a data 0x4d00000000f [ 692.582503][T22414] kvm: pic: non byte read [ 692.662316][T12359] usb 5-1: Using ep0 maxpacket: 8 [ 692.792318][T12359] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 692.800692][T12359] usb 5-1: config 0 has no interface number 0 [ 692.807231][T12359] usb 5-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 692.818446][T12359] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 692.829815][T12359] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 692.841348][T12359] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 692.852627][T12359] usb 5-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 692.866176][T12359] usb 5-1: config 0 interface 164 has no altsetting 0 [ 692.952614][T12359] usb 5-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 692.961872][T12359] usb 5-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 692.972260][T12359] usb 5-1: Product: syz [ 692.978993][T12359] usb 5-1: config 0 descriptor?? [ 693.161900][T12359] iforce 5-1:0.164: usb_submit_urb failed: -110 [ 693.181918][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.201975][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.221972][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.242134][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.401946][T12359] iforce 5-1:0.164: usb_submit_urb failed: -110 [ 693.421961][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.441934][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.461993][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.481984][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.502101][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.522093][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.542087][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 693.549380][T12359] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.164/input/input34 [ 693.686594][T12359] usb 5-1: USB disconnect, device number 34 [ 694.541937][T12357] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 694.781830][T12357] usb 5-1: Using ep0 maxpacket: 8 [ 694.902098][T12357] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 694.910560][T12357] usb 5-1: config 0 has no interface number 0 [ 694.916832][T12357] usb 5-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 694.928117][T12357] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 694.939494][T12357] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 694.951013][T12357] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 694.962415][T12357] usb 5-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 694.975868][T12357] usb 5-1: config 0 interface 164 has no altsetting 0 [ 695.062167][T12357] usb 5-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 695.071290][T12357] usb 5-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 695.079748][T12357] usb 5-1: Product: syz [ 695.085047][T12357] usb 5-1: config 0 descriptor?? [ 695.241972][T12357] iforce 5-1:0.164: usb_submit_urb failed: -110 [ 695.262125][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 10:40:02 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") [ 695.287464][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 10:40:02 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 10:40:02 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)=@ll={0x1e, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x2, 0x0) 10:40:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) r2 = syz_open_pts(r0, 0x0) close(r0) dup2(r1, r2) 10:40:02 executing program 1: socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b060501ff0080fffdffff2e0a0005610c00010006"], 0x19}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:40:02 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001c80)=[{&(0x7f0000001840)="699d889236d129b1100d8ec4a2c7a2392a9bb5e634f247fb92a9d5a5b5b8fe0eee8453be92f18e7bc7f6861c81ff278eb51e7a8e1329555009b02c028c3f3750263f2fb9528d7e3b52668e84be6160e3d0d3e77a7f3a547dc581cd21d80df44f45b3fb7eb49e2cd859478fdca0e3ad74cf8d43c766e1a2ee0cdf3b458494c7114320fa657a775586959fb8d226a73cce057580c7d8f5cb416e603e7c123593243b3d8ba39f5bddec858a28622696c2b1fc61cdbae844e148e42099482ac37a29577ab0a3becbdec25048c9e21291000000000000000000", 0xae}, {&(0x7f0000000300)="39d047c68dbbfc1c191f6fb2e32df644f05bda033aea107b23e0ffb62649bb4b07436056d086c7e9a1ca21c9ef872fc115e2798242c6c6faa685cca813c628528d1b96c089095282d472d0d443e5933b039305bc3fff123b39a64767ba1bceb2bd9851f165bad2833ea2e95bdcef8c61c8bd587c1f2726873c7d945ed8339c75436dbafa", 0x48}, {&(0x7f0000000100)="e0e268e22e8f332956695b346482401f41aa43145bf8f0e74cb6c438fd89c2dd3d9c01cde4ea903eda29ef86e6de373342b3938208c7c710ccdfc457dec2d0b10c072fa6cf5ff4bc5b3a4cee36c157bc2c679b72162074f3b95bc65a64e741286b196eaa01a47d76a477e43a90e14aa35a90350b9da20ffa9735cdad5a2e55f9272d5a433a66cbf2546152c3cc5b359ca444b702f7a905943d71073fa31003a5af779a902f2924c1d5f462d9460350309602889a95c34803b8d19efda238ad19987c7d862cfa916a78af9b0e6b17cec03a37a5110342e94df7c53b6ff68d1d33a13d789f9db2ce7ff70e4476", 0xec}, {&(0x7f00000003c0)="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", 0xc6}, {&(0x7f0000001bc0)="382b7af878ffd576d7d3d08d0f153bfdcb90c6693f1198ec96abb210aa67371d0d170b79faf0a2f62360cd67c200a4b707df091cb8dbd5d78f1ead9d60c31295a6e3db6a97bdd8f192d5f784d3b6740df7961c240500712bdc439f1535c56c39de39fe87a1785dc5455b1446754461f6fe3f0fd5a83f019c21b723230932d654c0451a6f4b6dded81b0eb44a7f86053e7d332e2bba38b7e21c5fe7ca1910", 0xfffffd8f}], 0x5, 0x9) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "6cc4874d92ef3271", "a5b97f82a0f27ad6931bc9f6d3ec0a6e", "c04bee04", "e4e5646239d2b894"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 695.320228][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.352953][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.383794][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.416612][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 10:40:02 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000940)=@ll={0x1e, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x2, 0x0) [ 695.445058][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.452512][T22455] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 695.460661][T22455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 695.491542][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.524500][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 10:40:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)="d8c9fd2b7ba7fa20e0", 0x9}, 0x0) [ 695.565077][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.599642][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.644130][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 10:40:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000640)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x57643d9) write$binfmt_script(r1, &(0x7f0000000740)={'#! ', './file0', [], 0xa, "2aa771040d2e94622eaa9ac1282c441884e13321b0168049bb38e3b54fd12582c7b43ea5dc57534b21266e"}, 0x36) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/53, 0x35}], 0x1, 0x0) [ 695.706576][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.752107][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.772130][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.807500][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.848437][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.872651][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.901592][T12357] iforce 5-1:0.164: usb_submit_urb failed: -71 [ 695.908678][T12357] input input35: Timeout waiting for response from device. [ 695.973819][T12357] usb 5-1: USB disconnect, device number 35 10:40:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) setresuid(0x0, 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 10:40:03 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001c80)=[{&(0x7f0000001840)="699d889236d129b1100d8ec4a2c7a2392a9bb5e634f247fb92a9d5a5b5b8fe0eee8453be92f18e7bc7f6861c81ff278eb51e7a8e1329555009b02c028c3f3750263f2fb9528d7e3b52668e84be6160e3d0d3e77a7f3a547dc581cd21d80df44f45b3fb7eb49e2cd859478fdca0e3ad74cf8d43c766e1a2ee0cdf3b458494c7114320fa657a775586959fb8d226a73cce057580c7d8f5cb416e603e7c123593243b3d8ba39f5bddec858a28622696c2b1fc61cdbae844e148e42099482ac37a29577ab0a3becbdec25048c9e21291000000000000000000", 0xae}, {&(0x7f0000000300)="39d047c68dbbfc1c191f6fb2e32df644f05bda033aea107b23e0ffb62649bb4b07436056d086c7e9a1ca21c9ef872fc115e2798242c6c6faa685cca813c628528d1b96c089095282d472d0d443e5933b039305bc3fff123b39a64767ba1bceb2bd9851f165bad2833ea2e95bdcef8c61c8bd587c1f2726873c7d945ed8339c75436dbafa", 0x48}, {&(0x7f0000000100)="e0e268e22e8f332956695b346482401f41aa43145bf8f0e74cb6c438fd89c2dd3d9c01cde4ea903eda29ef86e6de373342b3938208c7c710ccdfc457dec2d0b10c072fa6cf5ff4bc5b3a4cee36c157bc2c679b72162074f3b95bc65a64e741286b196eaa01a47d76a477e43a90e14aa35a90350b9da20ffa9735cdad5a2e55f9272d5a433a66cbf2546152c3cc5b359ca444b702f7a905943d71073fa31003a5af779a902f2924c1d5f462d9460350309602889a95c34803b8d19efda238ad19987c7d862cfa916a78af9b0e6b17cec03a37a5110342e94df7c53b6ff68d1d33a13d789f9db2ce7ff70e4476", 0xec}, {&(0x7f00000003c0)="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", 0xc6}, {&(0x7f0000001bc0)="382b7af878ffd576d7d3d08d0f153bfdcb90c6693f1198ec96abb210aa67371d0d170b79faf0a2f62360cd67c200a4b707df091cb8dbd5d78f1ead9d60c31295a6e3db6a97bdd8f192d5f784d3b6740df7961c240500712bdc439f1535c56c39de39fe87a1785dc5455b1446754461f6fe3f0fd5a83f019c21b723230932d654c0451a6f4b6dded81b0eb44a7f86053e7d332e2bba38b7e21c5fe7ca1910", 0xfffffd8f}], 0x5, 0x9) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "6cc4874d92ef3271", "a5b97f82a0f27ad6931bc9f6d3ec0a6e", "c04bee04", "e4e5646239d2b894"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 10:40:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000100)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x6, 0x0, 0x0, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 696.148171][T22486] sg_write: process 1143 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. [ 696.384960][T12357] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 696.692018][T12357] usb 5-1: Using ep0 maxpacket: 8 [ 696.812418][T12357] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 696.820757][T12357] usb 5-1: config 0 has no interface number 0 [ 696.827080][T12357] usb 5-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 696.838380][T12357] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 696.849815][T12357] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 696.861346][T12357] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 696.872633][T12357] usb 5-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 696.886041][T12357] usb 5-1: config 0 interface 164 has no altsetting 0 [ 696.972190][ C0] net_ratelimit: 26 callbacks suppressed [ 696.972204][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.984255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 696.990408][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 696.996688][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 697.002928][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 697.008989][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 697.015838][T12357] usb 5-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 697.025141][T12357] usb 5-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 697.033453][T12357] usb 5-1: Product: syz [ 697.039055][T12357] usb 5-1: config 0 descriptor?? [ 697.201916][T12357] iforce 5-1:0.164: usb_submit_urb failed: -110 [ 697.222015][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.242033][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.262004][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.281941][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.302098][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.372153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 697.378305][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 697.461988][T12357] iforce 5-1:0.164: usb_submit_urb failed: -110 [ 697.482104][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.502131][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.522087][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.543122][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.562131][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.582017][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.602125][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 697.609480][T12357] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.164/input/input36 [ 697.622173][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 697.628346][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 697.754368][T12357] usb 5-1: USB disconnect, device number 36 10:40:05 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 10:40:05 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 10:40:05 executing program 1: socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b060501ff0080fffdffff2e0a0005610c00010006"], 0x19}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:40:05 executing program 3: r0 = socket$kcm(0x10, 0x200000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="230000004a0081aee4050c00000f00000a8bc36f7d79ce3263dac37b7403c609000000", 0x23}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000ec0)={0x0, 0x323, 0x0, 0x0, 0x0, 0x182}, 0x0) 10:40:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) 10:40:05 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001c80)=[{&(0x7f0000001840)="699d889236d129b1100d8ec4a2c7a2392a9bb5e634f247fb92a9d5a5b5b8fe0eee8453be92f18e7bc7f6861c81ff278eb51e7a8e1329555009b02c028c3f3750263f2fb9528d7e3b52668e84be6160e3d0d3e77a7f3a547dc581cd21d80df44f45b3fb7eb49e2cd859478fdca0e3ad74cf8d43c766e1a2ee0cdf3b458494c7114320fa657a775586959fb8d226a73cce057580c7d8f5cb416e603e7c123593243b3d8ba39f5bddec858a28622696c2b1fc61cdbae844e148e42099482ac37a29577ab0a3becbdec25048c9e21291000000000000000000", 0xae}, {&(0x7f0000000300)="39d047c68dbbfc1c191f6fb2e32df644f05bda033aea107b23e0ffb62649bb4b07436056d086c7e9a1ca21c9ef872fc115e2798242c6c6faa685cca813c628528d1b96c089095282d472d0d443e5933b039305bc3fff123b39a64767ba1bceb2bd9851f165bad2833ea2e95bdcef8c61c8bd587c1f2726873c7d945ed8339c75436dbafa", 0x48}, {&(0x7f0000000100)="e0e268e22e8f332956695b346482401f41aa43145bf8f0e74cb6c438fd89c2dd3d9c01cde4ea903eda29ef86e6de373342b3938208c7c710ccdfc457dec2d0b10c072fa6cf5ff4bc5b3a4cee36c157bc2c679b72162074f3b95bc65a64e741286b196eaa01a47d76a477e43a90e14aa35a90350b9da20ffa9735cdad5a2e55f9272d5a433a66cbf2546152c3cc5b359ca444b702f7a905943d71073fa31003a5af779a902f2924c1d5f462d9460350309602889a95c34803b8d19efda238ad19987c7d862cfa916a78af9b0e6b17cec03a37a5110342e94df7c53b6ff68d1d33a13d789f9db2ce7ff70e4476", 0xec}, {&(0x7f00000003c0)="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", 0xc6}, {&(0x7f0000001bc0)="382b7af878ffd576d7d3d08d0f153bfdcb90c6693f1198ec96abb210aa67371d0d170b79faf0a2f62360cd67c200a4b707df091cb8dbd5d78f1ead9d60c31295a6e3db6a97bdd8f192d5f784d3b6740df7961c240500712bdc439f1535c56c39de39fe87a1785dc5455b1446754461f6fe3f0fd5a83f019c21b723230932d654c0451a6f4b6dded81b0eb44a7f86053e7d332e2bba38b7e21c5fe7ca1910", 0xfffffd8f}], 0x5, 0x9) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "6cc4874d92ef3271", "a5b97f82a0f27ad6931bc9f6d3ec0a6e", "c04bee04", "e4e5646239d2b894"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 10:40:05 executing program 3: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000180)="a4e20c56e9ea6d534f4b8eb4cf56330c57aa5037afa23c8380207d3820d787cce91e36363238c10a19eccbfadbb4d3d79a224aef08c3986138569e2ada8966166e64093240c7f5931bd3a6ec326f6582a6a6d62301b799ed5273972cfc54950289bdfd204c66d88694d1cea15ff8c657341e86b5af214f0300c12d3bfc4984b1b75dabc48678eddc", 0x88) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) 10:40:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) [ 698.554643][T22517] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 698.562949][T22517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:40:05 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001c80)=[{&(0x7f0000001840)="699d889236d129b1100d8ec4a2c7a2392a9bb5e634f247fb92a9d5a5b5b8fe0eee8453be92f18e7bc7f6861c81ff278eb51e7a8e1329555009b02c028c3f3750263f2fb9528d7e3b52668e84be6160e3d0d3e77a7f3a547dc581cd21d80df44f45b3fb7eb49e2cd859478fdca0e3ad74cf8d43c766e1a2ee0cdf3b458494c7114320fa657a775586959fb8d226a73cce057580c7d8f5cb416e603e7c123593243b3d8ba39f5bddec858a28622696c2b1fc61cdbae844e148e42099482ac37a29577ab0a3becbdec25048c9e21291000000000000000000", 0xae}, {&(0x7f0000000300)="39d047c68dbbfc1c191f6fb2e32df644f05bda033aea107b23e0ffb62649bb4b07436056d086c7e9a1ca21c9ef872fc115e2798242c6c6faa685cca813c628528d1b96c089095282d472d0d443e5933b039305bc3fff123b39a64767ba1bceb2bd9851f165bad2833ea2e95bdcef8c61c8bd587c1f2726873c7d945ed8339c75436dbafa", 0x48}, {&(0x7f0000000100)="e0e268e22e8f332956695b346482401f41aa43145bf8f0e74cb6c438fd89c2dd3d9c01cde4ea903eda29ef86e6de373342b3938208c7c710ccdfc457dec2d0b10c072fa6cf5ff4bc5b3a4cee36c157bc2c679b72162074f3b95bc65a64e741286b196eaa01a47d76a477e43a90e14aa35a90350b9da20ffa9735cdad5a2e55f9272d5a433a66cbf2546152c3cc5b359ca444b702f7a905943d71073fa31003a5af779a902f2924c1d5f462d9460350309602889a95c34803b8d19efda238ad19987c7d862cfa916a78af9b0e6b17cec03a37a5110342e94df7c53b6ff68d1d33a13d789f9db2ce7ff70e4476", 0xec}, {&(0x7f00000003c0)="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", 0xc6}, {&(0x7f0000001bc0)="382b7af878ffd576d7d3d08d0f153bfdcb90c6693f1198ec96abb210aa67371d0d170b79faf0a2f62360cd67c200a4b707df091cb8dbd5d78f1ead9d60c31295a6e3db6a97bdd8f192d5f784d3b6740df7961c240500712bdc439f1535c56c39de39fe87a1785dc5455b1446754461f6fe3f0fd5a83f019c21b723230932d654c0451a6f4b6dded81b0eb44a7f86053e7d332e2bba38b7e21c5fe7ca1910", 0xfffffd8f}], 0x5, 0x9) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "6cc4874d92ef3271", "a5b97f82a0f27ad6931bc9f6d3ec0a6e", "c04bee04", "e4e5646239d2b894"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 10:40:05 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0xd, @output}) 10:40:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="24000000660007031dfffd946fa2830020200a0003000010a61d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b130e19bad320a72d30d41076d38a32052f44e09", 0x4c}], 0x1}, 0x0) [ 698.774564][T12357] usb 5-1: new high-speed USB device number 37 using dummy_hcd 10:40:05 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x403, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @dev}}}, @sadb_address={0x5, 0x9, 0xac87ee583de43bd0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x2]}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) [ 699.091875][T12357] usb 5-1: Using ep0 maxpacket: 8 [ 699.222693][T12357] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 699.231125][T12357] usb 5-1: config 0 has no interface number 0 [ 699.237408][T12357] usb 5-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 699.248616][T12357] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 699.260077][T12357] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 699.271631][T12357] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 699.282956][T12357] usb 5-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 699.296501][T12357] usb 5-1: config 0 interface 164 has no altsetting 0 [ 699.453057][T12357] usb 5-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 699.462308][T12357] usb 5-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 699.470549][T12357] usb 5-1: Product: syz [ 699.486787][T12357] usb 5-1: config 0 descriptor?? [ 699.662223][T12357] iforce 5-1:0.164: usb_submit_urb failed: -110 [ 699.682077][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 699.701994][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 699.722022][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 699.742014][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 699.762252][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 699.921997][T12357] iforce 5-1:0.164: usb_submit_urb failed: -110 [ 699.942014][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 699.961933][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 699.981940][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 700.002245][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 700.021989][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 700.041962][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 700.062925][T12357] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 700.070264][T12357] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.164/input/input37 [ 700.215179][T12357] usb 5-1: USB disconnect, device number 37 [ 700.222046][ C0] iforce 5-1:0.164: iforce_usb_irq - usb_submit_urb failed with result -19 10:40:07 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x51, 0xffffffff, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 10:40:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1]}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000f14000)={0xa, 0x4e21}, 0x1c) 10:40:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'hsr0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c0000002400070500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x7c}}, 0x0) 10:40:07 executing program 1: socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b060501ff0080fffdffff2e0a0005610c00010006"], 0x19}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:40:07 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) 10:40:07 executing program 0: close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) [ 700.867248][T22575] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 10:40:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x401, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000380)=0x1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) 10:40:08 executing program 3: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}}, 0xfffffffffffffefa) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000180)) 10:40:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000000c0), 0x3deb4254893f4e, 0x0) [ 700.920487][T22580] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 700.928837][T22580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:40:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009740)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x400023f, 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4000000000002a5, 0x4008000) 10:40:08 executing program 3: exit(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x34, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr="1898b67cb32bb093245ac10888810c53"}, @gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x68}}, 0x0) 10:40:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r1, &(0x7f0000000440)={[{0x2d, 'rdma'}, {0x2d, 'cpu'}]}, 0xb) [ 701.162295][T12359] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 701.232233][T22602] batman_adv: Cannot find parent device [ 701.452328][T12359] usb 5-1: Using ep0 maxpacket: 8 [ 701.572084][T12359] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 701.580862][T12359] usb 5-1: config 0 has no interface number 0 [ 701.587163][T12359] usb 5-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 701.598328][T12359] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 701.609702][T12359] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 701.622872][T12359] usb 5-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 701.634177][T12359] usb 5-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 701.647692][T12359] usb 5-1: config 0 interface 164 has no altsetting 0 [ 701.732307][T12359] usb 5-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 701.741528][T12359] usb 5-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 701.749981][T12359] usb 5-1: Product: syz [ 701.755648][T12359] usb 5-1: config 0 descriptor?? [ 701.911913][T12359] iforce 5-1:0.164: usb_submit_urb failed: -110 [ 701.931955][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 701.952093][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 701.972100][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 701.992043][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 702.012331][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 702.172071][T12359] iforce 5-1:0.164: usb_submit_urb failed: -110 [ 702.192049][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 702.212921][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 702.232119][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 702.252140][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 702.272044][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 702.292134][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 702.312085][T12359] iforce 5-1:0.164: usb_submit_urb failed: -32 [ 702.319414][T12359] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.164/input/input38 [ 702.470577][T14973] usb 5-1: USB disconnect, device number 38 10:40:10 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x807, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x9, @pix={0x0, 0x0, 0x33424752}}) 10:40:10 executing program 2: unshare(0x400) r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x3) 10:40:10 executing program 5: unshare(0x24020400) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0xa, 0x2, {0x2, 0x0, 0x0, @empty}}, 0x24) 10:40:10 executing program 1: socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b060501ff0080fffdffff2e0a0005610c00010006"], 0x19}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:40:10 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='/\x02roup.stap\x00\bJ\x96\xec\xf6\xb5\xd2\x9a7\\\xcd\xf0t(\xcb\xf6>V\x92\xe3ra8\r\x8a\xfc\xefX\x1bw\x8c\xd6B\xc7\x1b\x97t\xa8d\xa58\xba\x91\x80\xe0Z\xd4\x86%\xc9\xbeQ~<\xc53\x10:\xae\xdd\xb4s\x7f\x8b\xe9\xeae\x1f\b\xe4\xee\x01B'}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x214}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20, 0x84, 0x8}], 0x20}, 0x0) 10:40:10 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 10:40:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x0) [ 703.171132][T22629] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 703.180133][T22629] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:40:10 executing program 5: prctl$PR_GET_NAME(0x10, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 10:40:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000017010000030000001fffffff000000001800000000000000170100f50300"/48], 0x30}, 0x0) [ 703.222219][ C0] net_ratelimit: 26 callbacks suppressed [ 703.222240][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 703.235505][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 703.241852][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 703.247935][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 703.254265][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 703.260370][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:40:10 executing program 4: readv(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x1, &(0x7f00000076c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0xf041dd9cd444052a, 0x0, 0xc5, {0xc5, 0x1, "cd06f578d2c0409e6d5e8d7e65f65cfda7998b7ea85886442895fcf9fb17bafb379edd513e24583075e6a3d94821e74ed176f6d7a2f69e641886036cf02f3f496f5df3f77ce5ffc1ee61354cabb8258a378559a502531afb06754b526b2eae800fe8d17d9c161a4147d033e8773d82532c4dec80f6bdccb9ebfa4cb78624509c3029ceae622438fa5afd80bb616556a17c2bb5fac487bbe116aa7b5cee39acdeb09e4b73f2573876848e46db9ce345ee7e447b5c306b818d289d8bca0bc901029ff53f"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "0987e527"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x87, 0x1, {0x22, 0x1e4}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0xb2, "79314a15e4bf7e3081ead22f07c86882fa2b2f3ddef7abe2a6bff8c37f184fca75c9f41ff5dc12265c7ab486ddd9b1be9ee82891f04ddb3a56de5c9a6068b9ce9476849f4240153bbf388be8b60bb7195461960cc264bb802f69104699e8047620fbefc7dcfff6279150009327489d6e783b92945e5fea38ae88137ba69db4cc160fddfe29b96aedf2a29e9a76c9ad39f5dd7bf6be0226edb4db2d1ad40abeb676d2a65db244aa4d5f53f79075f072971d81"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xf6, "b53c248d782708e07ade051a76c5e0dc1c24b9fbca967ec7377a3024764fa2b5c1c4efa448a6e4fd0a1f41a1b8f822202d8e54c4ce12c73f0c73caa61bc9337fb59b9cf10e608c09b9dc835c0d48d38ee570f28e4c4c029aed9c59b3654758f05059eeeac544d6bf185f860f6d881fd854a12df8dc4c8a0da33f8394ee6daf9c270e3f49e0b7f3210f58fd47467e0ac079c00b0e1c31370b4c28547916a7d3c78d69c00c540bad1168ccde119a721af60681d8369504e28f25eb58bd84115283b37cad30602f852a0a190bb63acf83ff0d3e7328c8e0ea1f839a37b70e6e4189331c493aab4759de8134d0103302c83dd50b3353931f"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x1c}}) r2 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x7, 0x0) dup3(r2, r0, 0x80000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 10:40:10 executing program 2: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(r3, &(0x7f0000000140)='comm\x00\\\"~w\x8d\'\x9d0s(%_\xff*B.\x02\xbb\x9f\xb9\xb9\xb5\xd5\xa5\a\xf3\xa6S\x98\xde\x96\x04\x85\xfa6D@\xfc\xbd\xee\xd4\xec:`\xc4R\b\xda\xbf\x82o\xff\v\xe68\xe2\xfeZr \x87\xc4!\xcc\xfa\xe3\xebM\x91\xd6\x17\xc2Z\xe7qDO\x80#\x92\x1d\x06\x00\x00\x00\x00\x00\x00\x00\xe2+arv\xefz\xc4:\ni\x90\xecZ2\xdb}\xa7\xeb\xc4\xff\xff\xff\x7f}\xb1P\x18Y\xf1l\x00\xa71\xf330\xb8\xcf\x917\x96e\xb6\xc5\xa7\xe8c\x10o\xf5\xcd\xdd\x11\t\x9f\xb4a\xfeQ\xc1E\x89\xd7a\x1a\xdbB\x12#w\xe8[p\x19\x03C\xec~3\x13\xe1K\x1e\xaa\xe5\x91\x9f\x00A\x06\'\x05\x8a\xcd\x19^_\x8a\xaf\xc4% \xb8\x1d\x89\x16\"dX\xb5\xf3\xc0\xf5\b\xea\xd9\x83\b\xca\x03\x82>-\xa7\xa2\x03\x91\xb3 \x88\xfe\xca\x8c\x10\x02\xab*b@g\xfcoO\xe8\x01\x15f*\xe4\xcaZ\xfd\xcep\xa4\xf3\xf4S\xdd\xe8\xa1%d\x8e\xfdv\x00\xce\xf8\xa3\xb0X\x17\x11\x1b^g\xfea\xbf\v\x89\xa1\x80C\x01f\x94\xdc+F\xb3i\x04\xcdWI\x80^\xce\xabB\xdf\xa8I\x87\xe6\xe3\t\xc8\x94u\xdbS~\x0e\xc5\x8d\x90/\xc8\xe2\x9do\xd7') fchmod(r4, 0x44) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) execveat(r4, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1000) 10:40:10 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc008}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r1 = dup2(r0, r0) sendmsg$tipc(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fefdf715ea0d886cba48a1fdb6c664486cbdcad3d711c368d7443dbf3b27927e298009b2467799e1488a495d956fb2ccf08f765ab78b6f91af5952b6", 0x3c}], 0x1}, 0x0) r2 = epoll_create(0x1) write$binfmt_misc(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 10:40:10 executing program 5: prctl$PR_GET_NAME(0x10, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 703.613366][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 703.619636][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:40:10 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg(r0, &(0x7f00000092c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0x10}, {0x10, 0x1}], 0x20}}], 0x2, 0x0) 10:40:10 executing program 5: prctl$PR_GET_NAME(0x10, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 703.852727][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 703.859188][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:40:11 executing program 2: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x2000000000000326, &(0x7f00000001c0)=[{}]}, 0x10) 10:40:11 executing program 3: name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0xedce20e832cdd604) 10:40:11 executing program 5: prctl$PR_GET_NAME(0x10, 0x0) r0 = socket$inet6(0xa, 0x400200000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000001c0), 0x4) r2 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) connect$unix(r1, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 10:40:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0xe803, &(0x7f0000000400)=[{&(0x7f0000000580)="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", 0x27d}], 0x1}, 0x0) 10:40:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x169, 0x11, 0x82}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:40:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffff, 0x0) readv(r0, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/46, 0x2e}, {0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3) 10:40:12 executing program 4: readv(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x1, &(0x7f00000076c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0xf041dd9cd444052a, 0x0, 0xc5, {0xc5, 0x1, "cd06f578d2c0409e6d5e8d7e65f65cfda7998b7ea85886442895fcf9fb17bafb379edd513e24583075e6a3d94821e74ed176f6d7a2f69e641886036cf02f3f496f5df3f77ce5ffc1ee61354cabb8258a378559a502531afb06754b526b2eae800fe8d17d9c161a4147d033e8773d82532c4dec80f6bdccb9ebfa4cb78624509c3029ceae622438fa5afd80bb616556a17c2bb5fac487bbe116aa7b5cee39acdeb09e4b73f2573876848e46db9ce345ee7e447b5c306b818d289d8bca0bc901029ff53f"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "0987e527"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x87, 0x1, {0x22, 0x1e4}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0xb2, "79314a15e4bf7e3081ead22f07c86882fa2b2f3ddef7abe2a6bff8c37f184fca75c9f41ff5dc12265c7ab486ddd9b1be9ee82891f04ddb3a56de5c9a6068b9ce9476849f4240153bbf388be8b60bb7195461960cc264bb802f69104699e8047620fbefc7dcfff6279150009327489d6e783b92945e5fea38ae88137ba69db4cc160fddfe29b96aedf2a29e9a76c9ad39f5dd7bf6be0226edb4db2d1ad40abeb676d2a65db244aa4d5f53f79075f072971d81"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xf6, "b53c248d782708e07ade051a76c5e0dc1c24b9fbca967ec7377a3024764fa2b5c1c4efa448a6e4fd0a1f41a1b8f822202d8e54c4ce12c73f0c73caa61bc9337fb59b9cf10e608c09b9dc835c0d48d38ee570f28e4c4c029aed9c59b3654758f05059eeeac544d6bf185f860f6d881fd854a12df8dc4c8a0da33f8394ee6daf9c270e3f49e0b7f3210f58fd47467e0ac079c00b0e1c31370b4c28547916a7d3c78d69c00c540bad1168ccde119a721af60681d8369504e28f25eb58bd84115283b37cad30602f852a0a190bb63acf83ff0d3e7328c8e0ea1f839a37b70e6e4189331c493aab4759de8134d0103302c83dd50b3353931f"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x1c}}) r2 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x7, 0x0) dup3(r2, r0, 0x80000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 10:40:12 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x50, 0x0, &(0x7f00000002c0)=0x11) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 10:40:12 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x1060000, 0xffffffffffffffff}}}, 0x90) 10:40:12 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e000507ed0580648c6394f21131d200100003402c00000000340080000000011400f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 10:40:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') preadv(r0, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/151, 0x97}], 0x1, 0x96) 10:40:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x2, &(0x7f0000004b40), 0x2a, &(0x7f0000004bc0)}, 0xf401}], 0x19cbcb36e8172e, 0x0) [ 705.890294][T22713] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 705.898904][T22713] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 10:40:13 executing program 2: unshare(0x20400) accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f00000000c0)) 10:40:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e000507ed0580648c6394f21131d200100003402c00000000340080000000011400f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 10:40:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getsig(0x420a, r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) 10:40:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000200)=0x7f, 0x4) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "2b07df2fd0846bc0964f4ffde3d917e302"}], 0x28}}], 0x1, 0x0) [ 706.102854][T22730] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 706.111089][T22730] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 10:40:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x50, 0x0, &(0x7f00000002c0)=0x11) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 10:40:13 executing program 2: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$setregs(0x8, r0, 0x0, 0x0) 10:40:14 executing program 4: readv(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x1, &(0x7f00000076c0)=ANY=[@ANYBLOB="120100006d9a3210450c1010c1a50000000109021b00010000000009046500110300020007058c0300ffffffdfd8f508c0a7dd3d4c259231deb8ee07d2f5bdb90398a60f442e0432f279bfd67660a4d50f00cdd65d1031e98f90afb4bfd93ea37e5e0374df694be0c4214769b2ff099a7fcd49406e5848bce348dc7bbb61401a0a4de82d68681e952c25b4545fc158b39698f1a6e2199e0c843b595681e0e9c1ef64d410fc5f2c97c90cd20600000000000000745161237974cd55fd34854eeb2c6a759984d06b45345395d0924832c47afaca2642841d692d511dc125bdc22117c7dee59e61f90cb38adc931706f12d7a488277cadb04ba6363f5790e361634099c197364e254888b7a1fb6422720692f263807ded4d742f0631817801ee23401f0ed3d673e36a7cfe85114cc292a9b27cbcd0459f106fa06e14e9d781e118f7b1331a6efeced8b04151c8ed49282f3935e4edea32ab097ae593b27da90a2a8111c2db569a8bc75fd32ff5f9295e07f32670802cad4ff0dd908cc8fddcd2db54f5115ab986f524890f2299aec0c932eb186493b6996eb430f56d8aca636e88e71799916196e9ab069c068d07d3862e0151eaea86c045d57dd6ac4064f27237880a74520b35514ece8c2899e7bfa971ac022cf3a02585f145d75eb351db11621df7a8518549b45d6dd44b8136f0fd3d47732b542563e27c6f405ce0cc3810000005d2d210dc0c1b5e103b0cd8c702205b71ed8009a4c42c0688accb4c8306fff"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0xf041dd9cd444052a, 0x0, 0xc5, {0xc5, 0x1, "cd06f578d2c0409e6d5e8d7e65f65cfda7998b7ea85886442895fcf9fb17bafb379edd513e24583075e6a3d94821e74ed176f6d7a2f69e641886036cf02f3f496f5df3f77ce5ffc1ee61354cabb8258a378559a502531afb06754b526b2eae800fe8d17d9c161a4147d033e8773d82532c4dec80f6bdccb9ebfa4cb78624509c3029ceae622438fa5afd80bb616556a17c2bb5fac487bbe116aa7b5cee39acdeb09e4b73f2573876848e46db9ce345ee7e447b5c306b818d289d8bca0bc901029ff53f"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "0987e527"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x87, 0x1, {0x22, 0x1e4}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0xb2, "79314a15e4bf7e3081ead22f07c86882fa2b2f3ddef7abe2a6bff8c37f184fca75c9f41ff5dc12265c7ab486ddd9b1be9ee82891f04ddb3a56de5c9a6068b9ce9476849f4240153bbf388be8b60bb7195461960cc264bb802f69104699e8047620fbefc7dcfff6279150009327489d6e783b92945e5fea38ae88137ba69db4cc160fddfe29b96aedf2a29e9a76c9ad39f5dd7bf6be0226edb4db2d1ad40abeb676d2a65db244aa4d5f53f79075f072971d81"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xf6, "b53c248d782708e07ade051a76c5e0dc1c24b9fbca967ec7377a3024764fa2b5c1c4efa448a6e4fd0a1f41a1b8f822202d8e54c4ce12c73f0c73caa61bc9337fb59b9cf10e608c09b9dc835c0d48d38ee570f28e4c4c029aed9c59b3654758f05059eeeac544d6bf185f860f6d881fd854a12df8dc4c8a0da33f8394ee6daf9c270e3f49e0b7f3210f58fd47467e0ac079c00b0e1c31370b4c28547916a7d3c78d69c00c540bad1168ccde119a721af60681d8369504e28f25eb58bd84115283b37cad30602f852a0a190bb63acf83ff0d3e7328c8e0ea1f839a37b70e6e4189331c493aab4759de8134d0103302c83dd50b3353931f"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x1c}}) r2 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x7, 0x0) dup3(r2, r0, 0x80000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 10:40:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e000507ed0580648c6394f21131d200100003402c00000000340080000000011400f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 10:40:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x50, 0x0, &(0x7f00000002c0)=0x11) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 10:40:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x71, 0xdd27358059215c39) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000200)=0xfffffffffffffe91) 10:40:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getsig(0x420a, r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) [ 707.451000][T22760] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 707.459277][T22760] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 10:40:14 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e000507ed0580648c6394f21131d200100003402c00000000340080000000011400f88000f01700d0bd", 0x2e}], 0x1}, 0x0) 10:40:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175d0006"], 0x31) r1 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = geteuid() r4 = creat(0x0, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) accept4$alg(r4, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)=0x0) r6 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, 0x0}) shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee01, r3, 0xee01, 0x80}, 0x81, 0x0, 0x9, 0x20, r5, r7, 0x200}) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) geteuid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000140)=0x200, 0x1cb) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r10 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r10, 0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/fib_trie\x00') r11 = socket$inet6(0xa, 0x2, 0x0) close(r11) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000100)=0x18) socket$kcm(0xa, 0x5, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000080)=""/92, 0x5c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 10:40:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x50, 0x0, &(0x7f00000002c0)=0x11) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 707.642275][T22775] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 707.650526][T22775] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 10:40:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="f6", 0x1}], 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x116) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 10:40:14 executing program 0: unshare(0x24020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0xa8, 0x2}) 10:40:15 executing program 3: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca32, 0xffffffffffffffff, 0x400000000000000) 10:40:16 executing program 2: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$setregs(0x8, r0, 0x0, 0x0) 10:40:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x5, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) 10:40:16 executing program 0: pselect6(0x40, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0x0, 0x0) 10:40:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getsig(0x420a, r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) 10:40:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="04dca5055e0bcfec7be070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r1, 0x5404, 0x0) ioctl$TCSETS(r1, 0x5403, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) 10:40:16 executing program 4: readv(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x1, &(0x7f00000076c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, &(0x7f00000001c0)={0xf041dd9cd444052a, 0x0, 0xc5, {0xc5, 0x1, "cd06f578d2c0409e6d5e8d7e65f65cfda7998b7ea85886442895fcf9fb17bafb379edd513e24583075e6a3d94821e74ed176f6d7a2f69e641886036cf02f3f496f5df3f77ce5ffc1ee61354cabb8258a378559a502531afb06754b526b2eae800fe8d17d9c161a4147d033e8773d82532c4dec80f6bdccb9ebfa4cb78624509c3029ceae622438fa5afd80bb616556a17c2bb5fac487bbe116aa7b5cee39acdeb09e4b73f2573876848e46db9ce345ee7e447b5c306b818d289d8bca0bc901029ff53f"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "0987e527"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x87, 0x1, {0x22, 0x1e4}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0xb2, "79314a15e4bf7e3081ead22f07c86882fa2b2f3ddef7abe2a6bff8c37f184fca75c9f41ff5dc12265c7ab486ddd9b1be9ee82891f04ddb3a56de5c9a6068b9ce9476849f4240153bbf388be8b60bb7195461960cc264bb802f69104699e8047620fbefc7dcfff6279150009327489d6e783b92945e5fea38ae88137ba69db4cc160fddfe29b96aedf2a29e9a76c9ad39f5dd7bf6be0226edb4db2d1ad40abeb676d2a65db244aa4d5f53f79075f072971d81"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xf6, "b53c248d782708e07ade051a76c5e0dc1c24b9fbca967ec7377a3024764fa2b5c1c4efa448a6e4fd0a1f41a1b8f822202d8e54c4ce12c73f0c73caa61bc9337fb59b9cf10e608c09b9dc835c0d48d38ee570f28e4c4c029aed9c59b3654758f05059eeeac544d6bf185f860f6d881fd854a12df8dc4c8a0da33f8394ee6daf9c270e3f49e0b7f3210f58fd47467e0ac079c00b0e1c31370b4c28547916a7d3c78d69c00c540bad1168ccde119a721af60681d8369504e28f25eb58bd84115283b37cad30602f852a0a190bb63acf83ff0d3e7328c8e0ea1f839a37b70e6e4189331c493aab4759de8134d0103302c83dd50b3353931f"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x1c}}) r2 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x7, 0x0) dup3(r2, r0, 0x80000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) [ 709.452257][ C0] net_ratelimit: 26 callbacks suppressed [ 709.452279][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 709.464296][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 709.470668][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 709.476967][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 709.483412][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 709.489591][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:40:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000fc0)=@newlink={0xa8, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0xa8}}, 0x0) 10:40:16 executing program 2: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$setregs(0x8, r0, 0x0, 0x0) 10:40:16 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0x1, 0x0, &(0x7f0000000300)={0x80000001}, 0x8) 10:40:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x7a04, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) [ 709.693159][T22829] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 709.702586][T22829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 10:40:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x6000, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0xc000000, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x700000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local}, r3}}, 0x48) 10:40:16 executing program 2: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) ptrace(0x4206, r0) ptrace$setregs(0x8, r0, 0x0, 0x0) 10:40:16 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) [ 709.862711][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 709.868894][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:40:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x734) 10:40:17 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000005}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) [ 710.096072][ C1] protocol 88fb is buggy, dev hsr_slave_0 10:40:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getsig(0x420a, r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) 10:40:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x6000, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0xc000000, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x700000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local}, r3}}, 0x48) 10:40:18 executing program 0: unshare(0x20400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, 0x0, 0xfffffffffffffde4, 0x0) 10:40:18 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/90, 0xfffffffffffffdb6, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) 10:40:18 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 10:40:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x6000, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0xc000000, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x700000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local}, r3}}, 0x48) 10:40:18 executing program 4: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) r0 = socket(0x10, 0x802, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800010}, 0xc) 10:40:18 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="240000005a0007031dff", 0xa}], 0x1}, 0x0) r0 = semget$private(0x0, 0x2000000010a, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)) 10:40:18 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 10:40:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x6000, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0xc000000, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x700000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @local}, r3}}, 0x48) 10:40:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 10:40:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0300008dbb532e9a88e76884"], 0x1}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) 10:40:18 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x19d, 0xfffffffffffffffe, &(0x7f0000000000)={0x2, 0x8004e20}, 0x10) 10:40:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/128, 0x80}], 0x1) timer_create(0x2, &(0x7f00000013c0)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x7}}, 0x0) 10:40:18 executing program 0: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x100}) 10:40:18 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 10:40:19 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/90, 0xfffffffffffffdb6, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) 10:40:19 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) 10:40:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6d83e56aa9f17265}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa982}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:19 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220) 10:40:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x3f00, 0x0, 0x0, 0x0, 0xffffff87, 0x0, 0x30000}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 10:40:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x36, &(0x7f0000002a40)={{0x12, 0x1, 0x0, 0x94, 0x1b, 0x69, 0x40, 0x711, 0x210, 0x316b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb8, 0x0, 0x2, 0xc4, 0x2f, 0xa9, 0x0, [], [{{0x9, 0x5, 0x88, 0x3}}, {{0x9, 0x5, 0x87, 0x3}}]}}]}}]}}, 0x0) [ 712.002441][T22931] ebt_limit: overflow, try lower: 1237055799/2886947322 10:40:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$kcm(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x69) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x8, 0x1, 0x0, [{}, {[@local]}]}]}}}], 0x20, 0x5}, 0x0) [ 712.056908][T22941] ebt_limit: overflow, try lower: 1237055799/2886947322 10:40:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0xfffffffffffffe2f, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@loopback, 0x0, 0x32}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x3d2}}]}, 0x13c}}, 0x0) 10:40:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000648eac)=@newsa={0xf0, 0x10, 0x717, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 10:40:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/568]}, 0x2b0) 10:40:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x2d}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 10:40:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000000c0)) [ 712.312442][T12357] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 712.376522][T22958] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 712.672053][T12357] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 712.680530][T12357] usb 4-1: config 0 has no interface number 0 [ 712.686929][T12357] usb 4-1: config 0 interface 184 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 712.698115][T12357] usb 4-1: config 0 interface 184 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 712.709368][T12357] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=31.6b [ 712.718598][T12357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.728110][T12357] usb 4-1: config 0 descriptor?? [ 712.774627][T12357] mct_u232 4-1:0.184: MCT U232 converter detected [ 712.786484][T12357] usb 4-1: MCT U232 converter now attached to ttyUSB0 10:40:19 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/90, 0xfffffffffffffdb6, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) 10:40:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r2}]]}}}]}, 0x38}}, 0x0) 10:40:19 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) listen(r1, 0x0) sendmmsg(r2, &(0x7f0000002940)=[{{&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x3, @random="66b1f4ee557b", 'ip6gretap0\x00'}}, 0x80, 0x0}, 0xfffffffffffff001}], 0x1, 0x81) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0xff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @empty}, 0x18) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r3, r5, 0x0, 0x8000fffffffe) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 10:40:19 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:40:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='team0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x51}}, 0x0) [ 712.977089][T12357] usb 4-1: USB disconnect, device number 25 [ 712.996140][T12357] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 713.005480][T12357] mct_u232 4-1:0.184: device disconnected [ 713.166417][T22982] team0 (unregistering): Port device team_slave_0 removed [ 713.231895][T22982] team0 (unregistering): Port device team_slave_1 removed [ 713.741930][T14973] usb 4-1: new high-speed USB device number 26 using dummy_hcd 10:40:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0020b873f608c2150f5521600b"], 0x10) 10:40:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000001dc0)=[@acquire], 0xfffffffffffffe62, 0x0, 0x0}) 10:40:21 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) socket$kcm(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0xfc, 0x0, @loopback}], 0x1c) add_key$user(&(0x7f0000000740)='user\x00', 0x0, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000080)=""/92, 0x5c, 0x0) 10:40:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='team0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x51}}, 0x0) 10:40:21 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001340)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000001280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) clone(0x40108000, 0x0, 0x0, 0x0, 0x0) 10:40:21 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000000)=""/90, 0xfffffffffffffdb6, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000780), 0xffffffffffffffe6, 0x0, 0x0, 0x0) [ 714.029038][T22996] binder: 22995:22996 ioctl c0306201 20002040 returned -14 [ 714.052125][T14973] usb 4-1: device descriptor read/all, error -71 10:40:21 executing program 4: r0 = socket(0x2, 0x2000000003, 0x100000001) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendto(r0, &(0x7f0000000080)="0400", 0x2, 0x8002, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0xffffffffffffff71, 0x2, 0x8400000000000000}, 0x28) recvmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/48, 0x30}], 0x1}}], 0x1, 0x0, 0x0) 10:40:21 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x8c, 0x78, 0x8, 0x2040, 0x4902, 0xff51, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xf, 0xa0, 0x63, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) [ 714.106578][T23005] IPVS: ftp: loaded support on port[0] = 21 10:40:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe52, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000022000104000200a600000000000000b0bf547b5f6d349da44f078f1201010000000000008aab186bdc8af61121be129ca86ecd55927a3d6d4ee9a52d00"], 0x14}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@delsa={0x3c, 0x11, 0x1, 0x0, 0x0, {@in=@remote}, [@srcaddr={0x14, 0xd, @in6=@empty}]}, 0x3c}, 0x8}, 0x0) [ 714.224092][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:40:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='team0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x51}}, 0x0) 10:40:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7c}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) [ 714.358786][T23022] IPVS: ftp: loaded support on port[0] = 21 10:40:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000100), 0x4) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x800000}, 0x10) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0xfff6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) socket(0x10, 0x2, 0x0) 10:40:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='team0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x51}}, 0x0) [ 714.772288][T14973] usb 4-1: new high-speed USB device number 27 using dummy_hcd 10:40:21 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000100)="46de", 0x2) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 10:40:22 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="24000000200007021dfffd946f6105000a0000031f000000000008000800170004000400", 0x24}], 0x1}, 0x0) [ 715.032605][T14973] usb 4-1: Using ep0 maxpacket: 8 10:40:22 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 715.164338][T14973] usb 4-1: config 0 has an invalid interface number: 26 but max is 0 [ 715.172635][T14973] usb 4-1: config 0 has no interface number 0 [ 715.178832][T14973] usb 4-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 715.189220][T14973] usb 4-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 715.198426][T14973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.269526][T14973] usb 4-1: config 0 descriptor?? 10:40:22 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 10:40:22 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x4) 10:40:22 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r0, 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x41, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r2, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000380)=0x9) syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xd, 0x1}, 0x18) listen(r2, 0x200000000002) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 715.522186][T14973] hdpvr 4-1:0.26: unexpected answer of status request, len -71 [ 715.529838][T14973] hdpvr 4-1:0.26: device init failed [ 715.535431][T14973] hdpvr: probe of 4-1:0.26 failed with error -12 [ 715.559093][T14973] usb 4-1: USB disconnect, device number 27 [ 715.692357][ C0] net_ratelimit: 27 callbacks suppressed [ 715.692378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.704570][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.711150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.717491][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 715.723992][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 715.730267][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 716.102222][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 716.108549][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 716.281954][T14973] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 716.332054][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 716.338097][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 716.532210][T14973] usb 4-1: Using ep0 maxpacket: 8 [ 716.652103][T14973] usb 4-1: config 0 has an invalid interface number: 26 but max is 0 [ 716.660309][T14973] usb 4-1: config 0 has no interface number 0 [ 716.666650][T14973] usb 4-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 716.676601][T14973] usb 4-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 716.685771][T14973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.695036][T14973] usb 4-1: config 0 descriptor?? [ 716.951985][T14973] hdpvr 4-1:0.26: unexpected answer of status request, len -71 [ 716.959599][T14973] hdpvr 4-1:0.26: device init failed [ 716.965329][T14973] hdpvr: probe of 4-1:0.26 failed with error -12 [ 716.974193][T14973] usb 4-1: USB disconnect, device number 28 10:40:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1}) 10:40:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000100), 0x4) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x800000}, 0x10) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0xfff6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) socket(0x10, 0x2, 0x0) 10:40:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setitimer(0x1, 0x0, 0x0) 10:40:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0001260000002600096cfb053868ee58ed076eede6775aff0f0000000000002e8bfbdf3aa9e4ba44"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:40:24 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:40:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ix6_\x81ti0\x00', 0x403}) 10:40:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 717.334631][T23083] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 10:40:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0_to_team\x00', 0x10) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 10:40:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0xa, 0x6, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10d, 0xd, &(0x7f0000001ffc)=0x2, 0x1) listen(r1, 0x0) 10:40:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 717.691929][T14973] usb 1-1: new high-speed USB device number 30 using dummy_hcd 10:40:24 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 10:40:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000100), 0x4) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x800000}, 0x10) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0xfff6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) socket(0x10, 0x2, 0x0) 10:40:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 717.961975][T14973] usb 1-1: Using ep0 maxpacket: 8 10:40:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 718.084244][T14973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.095857][T14973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 718.109494][T14973] usb 1-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 718.119440][T14973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:40:25 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000c0a43ba5d806055b6fdd80b40000000030001000929ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 718.149703][T14973] usb 1-1: config 0 descriptor?? [ 718.245655][T23127] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 718.623410][T14973] hid (null): invalid report_size 1048410 [ 718.636868][T14973] hid-generic 0003:1E5E:0313.000D: unexpected long global item [ 718.645807][T14973] hid-generic: probe of 0003:1E5E:0313.000D failed with error -22 [ 718.824876][T14973] usb 1-1: USB disconnect, device number 30 [ 719.591846][T14973] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 719.831870][T14973] usb 1-1: Using ep0 maxpacket: 8 [ 719.952023][T14973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.963146][T14973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 719.976145][T14973] usb 1-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 719.985329][T14973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.994723][T14973] usb 1-1: config 0 descriptor?? [ 720.292546][T14973] hid (null): invalid report_size 1048410 [ 720.300846][T14973] hid-generic 0003:1E5E:0313.000E: unexpected long global item [ 720.309147][T14973] hid-generic: probe of 0003:1E5E:0313.000E failed with error -22 10:40:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0001260000002600096cfb053868ee58ed076eede6775aff0f0000000000002e8bfbdf3aa9e4ba44"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:40:27 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{&(0x7f0000001e00)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000001f80)="40b6df0436eb6f67273407d815827e5567e0f0d44f482682f559b75109e1f0dcb64eb81564f58db3a0ea3aa9f361fb0941cccd9e99ff9d275b6b1f7f0f300d7363f1ae125569f7f158b3e9915eb8c5d35c67b073cba8a8ac6bacadd579f59d6908bb5ad63ba296527807b3749785a9258c6bdb0dc8bd46eafa36aae29a9a93", 0x7f}], 0x1}}], 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0xfffffffffffffffd, @ipv4={[], [], @dev}}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0xfffffffffffffff7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 10:40:27 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:40:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) 10:40:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x8b1dbd0f) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000100), 0x4) socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10000, &(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x800000}, 0x10) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0xfff6) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) socket(0x10, 0x2, 0x0) 10:40:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000040)=0xb8) sendto$inet6(r1, 0x0, 0x0, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0xfe80000000000000, 0xfe800000, 0xe603000000000000]}}, 0x1c) [ 720.346929][T14973] usb 1-1: USB disconnect, device number 31 10:40:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x3b3) 10:40:27 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vemA\xc1\xf8\xa6A\x16YG.\x8a\xa9fZ\x01\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\x85\xbev\xc3]\xc9\xbf\'_R\xe7\x81\x9b[\xcb#\xb9B\xfc\x85^6\xeb[]$n\x97\xa56\xfe\x008_\xfef\xd2\v,\x01\x05-\x98\xed\xc1\xe4*\x0f\xcf\xb7\xf4\x9e\xd9\xfe~\xc75!\xf6\x80\xd4 >v/\xaa\xf1\x1buk\xd8\x88ZW\xe1n\x02\xcd(/\xf8s\x85\xdc\xe7,\x95\x97\xb1u\x05\x93\xb8\xe6o\x8c\x17\xe4|\xfa>\xe6\xf1>\xc2>s\xf8\xba\"\xf4\x04\x14\xe6\x96\xeb\xac8\f\xa6\xdeu\xc99Y;', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa, 0x0, &(0x7f0000000000)=0xfffffffffffffe3a) 10:40:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1ea3e4", 0x13}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:40:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) 10:40:27 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0x3}, 0x20) 10:40:27 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x7) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x800}, 0x1c) [ 720.882149][T14973] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 721.128532][T14973] usb 1-1: Using ep0 maxpacket: 8 [ 721.252296][T14973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.263573][T14973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.276850][T14973] usb 1-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 721.286009][T14973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.295863][T14973] usb 1-1: config 0 descriptor?? [ 721.773484][T14973] hid (null): invalid report_size 1048410 [ 721.788954][T14973] hid-generic 0003:1E5E:0313.000F: unexpected long global item [ 721.797392][T14973] hid-generic: probe of 0003:1E5E:0313.000F failed with error -22 [ 721.932240][ C0] net_ratelimit: 28 callbacks suppressed [ 721.932254][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.944549][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 721.950891][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.957102][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 721.963757][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 721.969768][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 721.985405][T14973] usb 1-1: USB disconnect, device number 32 [ 722.332157][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 722.340236][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:40:29 executing program 0: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0001260000002600096cfb053868ee58ed076eede6775aff0f0000000000002e8bfbdf3aa9e4ba44"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:40:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) 10:40:29 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0x3}, 0x20) 10:40:29 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 10:40:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x400000000000001, 0x83, 0x101, 0x8000000006, 0x0, 0x1}, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r0, r1, 0x0, 0x805) 10:40:29 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0x3}, 0x20) 10:40:29 executing program 3: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0xe) [ 722.718603][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 722.725124][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:40:29 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0x3}, 0x20) [ 722.852493][T12446] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 723.092188][T12446] usb 1-1: Using ep0 maxpacket: 8 [ 723.212452][T12446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.223613][T12446] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 723.236737][T12446] usb 1-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 723.245929][T12446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.255627][T12446] usb 1-1: config 0 descriptor?? [ 723.722730][T12446] hid (null): invalid report_size 1048410 [ 723.731343][T12446] hid-generic 0003:1E5E:0313.0010: unexpected long global item [ 723.739719][T12446] hid-generic: probe of 0003:1E5E:0313.0010 failed with error -22 10:40:30 executing program 5: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg$sock(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@mark={{0x14}}], 0x18}}], 0x2, 0x0) 10:40:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x6, @output}) 10:40:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xf7) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0xfff}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[], 0x0, 0x4380}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) [ 723.960910][T12446] usb 1-1: USB disconnect, device number 33 10:40:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0001260000002600096cfb053868ee58ed076eede6775aff0f0000000000002e8bfbdf3aa9e4ba44"], 0x0, 0x0, 0x0, 0x0}, 0x0) 10:40:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001640)=""/219, 0xdb}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 10:40:31 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffffff20d10702389ed40000000309021b0001000000000904000001efff2f00090702100000000000"], 0x0) 10:40:31 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) 10:40:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xf7) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0xfff}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[], 0x0, 0x4380}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)=""/4096, 0x1000}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x5dd7d56a, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000000c0), 0x226, 0x0) 10:40:31 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) 10:40:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xf7) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0xfff}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[], 0x0, 0x4380}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:31 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 \t'], 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 724.832818][T12357] usb 4-1: new high-speed USB device number 29 using dummy_hcd 10:40:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xf7) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0xfff}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[], 0x0, 0x4380}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 724.881975][T12446] usb 1-1: new high-speed USB device number 34 using dummy_hcd 10:40:32 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) 10:40:32 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080044d76, &(0x7f0000000300)) [ 725.071964][T12357] usb 4-1: Using ep0 maxpacket: 32 [ 725.122307][T12446] usb 1-1: Using ep0 maxpacket: 8 [ 725.192741][T12357] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.242269][T12446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.253796][T12446] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 725.267224][T12446] usb 1-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 725.276685][T12446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.327410][T12446] usb 1-1: config 0 descriptor?? [ 725.333900][T12357] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.424111][T12357] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.437703][T12357] usb 4-1: New USB device found, idVendor=07d1, idProduct=3802, bcdDevice=d4.9e [ 725.447207][T12357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.457549][T12357] usb 4-1: config 0 descriptor?? [ 725.705258][T12357] usb 4-1: USB disconnect, device number 29 [ 725.812453][T12446] hid (null): invalid report_size 1048410 [ 725.821228][T12446] hid-generic 0003:1E5E:0313.0011: unexpected long global item [ 725.829563][T12446] hid-generic: probe of 0003:1E5E:0313.0011 failed with error -22 [ 726.027539][T12357] usb 1-1: USB disconnect, device number 34 [ 726.481911][T12446] usb 4-1: new high-speed USB device number 30 using dummy_hcd 10:40:33 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) 10:40:33 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xd0, 0x9d, 0x8c, 0x8, 0x91e, 0x3, 0xe5c4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x0, 0x61, 0x9, 0xf5}}]}}]}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") [ 726.722040][T12446] usb 4-1: Using ep0 maxpacket: 32 [ 726.842296][T12446] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.871907][T12359] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 726.932165][T12446] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.022026][T12446] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 727.035168][T12446] usb 4-1: New USB device found, idVendor=07d1, idProduct=3802, bcdDevice=d4.9e [ 727.044558][T12446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.053901][T12446] usb 4-1: config 0 descriptor?? [ 727.112269][T12359] usb 3-1: Using ep0 maxpacket: 8 [ 727.231996][T12359] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 727.240421][T12359] usb 3-1: config 0 has no interface number 0 [ 727.246747][T12359] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=e5.c4 [ 727.255896][T12359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.265381][T12359] usb 3-1: config 0 descriptor?? [ 727.293807][T12446] usb 4-1: USB disconnect, device number 30 [ 727.304989][T12359] garmin_gps 3-1:0.109: Garmin GPS usb/tty converter detected [ 727.313773][T12359] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 727.321081][T12359] garmin_gps: probe of ttyUSB0 failed with error -22 10:40:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x0, 0x81, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}) dup2(r2, r1) 10:40:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10) 10:40:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001640)=""/219, 0xdb}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 10:40:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001640)=""/219, 0xdb}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 10:40:34 executing program 5: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000200007041dfffd946f6105000200000a1f0000030028080008000a00e9110000", 0x24}], 0x1}, 0x0) [ 727.506134][T12446] usb 3-1: USB disconnect, device number 24 [ 727.513324][T12446] garmin_gps 3-1:0.109: device disconnected 10:40:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0xe, 0x41, 0x8000000001}, 0x3c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev, @in=@local}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000100)=0xe8) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000140)={r0, &(0x7f0000000100), 0x0}, 0x18) 10:40:34 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000240), 0x204, 0xfffffffffffffffc}]) 10:40:34 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) 10:40:34 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe07f02a0000000100ff0722", 0x15}], 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 10:40:35 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) 10:40:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) [ 728.172633][ C0] net_ratelimit: 26 callbacks suppressed [ 728.172655][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 728.184939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 728.191548][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 728.197983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 728.204674][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 728.211037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 728.282506][T12446] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 728.521831][T12446] usb 3-1: Using ep0 maxpacket: 8 [ 728.572256][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 728.578270][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 728.642123][T12446] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 728.650429][T12446] usb 3-1: config 0 has no interface number 0 [ 728.657381][T12446] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=e5.c4 [ 728.666577][T12446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.676012][T12446] usb 3-1: config 0 descriptor?? [ 728.714462][T12446] garmin_gps 3-1:0.109: Garmin GPS usb/tty converter detected [ 728.723465][T12446] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 728.730769][T12446] garmin_gps: probe of ttyUSB0 failed with error -22 [ 728.892290][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 728.898376][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 728.915239][T12446] usb 3-1: USB disconnect, device number 25 [ 728.922807][T12446] garmin_gps 3-1:0.109: device disconnected 10:40:36 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 10:40:36 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe07f02a0000000100ff0722", 0x15}], 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 10:40:36 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) 10:40:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001640)=""/219, 0xdb}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 10:40:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001640)=""/219, 0xdb}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 10:40:36 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 10:40:36 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000280)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @empty}, 0xc) 10:40:36 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe07f02a0000000100ff0722", 0x15}], 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 10:40:36 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe07f02a0000000100ff0722", 0x15}], 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f00000023c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) 10:40:36 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 10:40:37 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) ppoll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) [ 730.013821][T12358] kworker/dying (12358) used greatest stack depth: 52176 bytes left [ 730.022570][ T5] kworker/dying (5) used greatest stack depth: 51032 bytes left 10:40:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001640)=""/219, 0xdb}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 10:40:37 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 10:40:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 10:40:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/14, 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001640)=""/219, 0xdb}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f000031aff8)={r1, r2}) sendmsg$rds(r3, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) 10:40:37 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 10:40:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, 0x0) ioctl(r1, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e9615f839eafd55ff65c7566c48a2e65a0ef05b54c50bc0267f6c8235db500bb4aadfc364d18029ca0c30a32e53ccbffef3dbee289ab5e860dd7170e6fde1643ba4d837b0fb2c03ca4a3a82f476e8fdd0f4192e6dec76cdeef2987bad4f04fae657791c48fcc019cbbb95f6381bfbde5d9148abf6531403564160f9374c8dc55386c863") r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000780)=""/174, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) r3 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000640)='syz', 0xfffffffffffffff9) add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, r3) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="4700000003000000000000000000000000000000537a217b84b99a00287379c282668054f6341336ddad4ddc3a6a880e93a0880d2768fd52eeac94226f762cb3d6c3886c83a64f396fe899e22b7580ebc141a4af19e640902435c2a96adf328b189b49e00e86cb17086c375b1ef3d091b9f72d"], 0x73) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x20805) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) connect$pptp(r5, &(0x7f0000000840)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 10:40:37 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 10:40:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, 0x0) ioctl(r1, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e9615f839eafd55ff65c7566c48a2e65a0ef05b54c50bc0267f6c8235db500bb4aadfc364d18029ca0c30a32e53ccbffef3dbee289ab5e860dd7170e6fde1643ba4d837b0fb2c03ca4a3a82f476e8fdd0f4192e6dec76cdeef2987bad4f04fae657791c48fcc019cbbb95f6381bfbde5d9148abf6531403564160f9374c8dc55386c863") r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000780)=""/174, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) r3 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000640)='syz', 0xfffffffffffffff9) add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, r3) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="4700000003000000000000000000000000000000537a217b84b99a00287379c282668054f6341336ddad4ddc3a6a880e93a0880d2768fd52eeac94226f762cb3d6c3886c83a64f396fe899e22b7580ebc141a4af19e640902435c2a96adf328b189b49e00e86cb17086c375b1ef3d091b9f72d"], 0x73) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x20805) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) connect$pptp(r5, &(0x7f0000000840)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 10:40:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, 0x0) ioctl(r1, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e9615f839eafd55ff65c7566c48a2e65a0ef05b54c50bc0267f6c8235db500bb4aadfc364d18029ca0c30a32e53ccbffef3dbee289ab5e860dd7170e6fde1643ba4d837b0fb2c03ca4a3a82f476e8fdd0f4192e6dec76cdeef2987bad4f04fae657791c48fcc019cbbb95f6381bfbde5d9148abf6531403564160f9374c8dc55386c863") r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000780)=""/174, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) r3 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000640)='syz', 0xfffffffffffffff9) add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, r3) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="4700000003000000000000000000000000000000537a217b84b99a00287379c282668054f6341336ddad4ddc3a6a880e93a0880d2768fd52eeac94226f762cb3d6c3886c83a64f396fe899e22b7580ebc141a4af19e640902435c2a96adf328b189b49e00e86cb17086c375b1ef3d091b9f72d"], 0x73) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x20805) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) connect$pptp(r5, &(0x7f0000000840)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 10:40:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004ec0)=@newqdisc={0x24, 0x24, 0x31d, 0x0, 0x0, {0x0, r4, {0x0, 0xf0ffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) 10:40:38 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000110007041dfffd946f6105000200000a1f0000030028080008000c0004000300", 0x24}], 0x1}, 0x0) 10:40:38 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 10:40:38 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 10:40:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc}}) 10:40:38 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty=0x2}, "120022ebffff0000"}}}}}, 0x0) 10:40:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, 0x0) ioctl(r1, 0x40, &(0x7f0000000580)="4b53028e43f83adda21bb846dc9be91dec000e1ed2b9d71f3e9615f839eafd55ff65c7566c48a2e65a0ef05b54c50bc0267f6c8235db500bb4aadfc364d18029ca0c30a32e53ccbffef3dbee289ab5e860dd7170e6fde1643ba4d837b0fb2c03ca4a3a82f476e8fdd0f4192e6dec76cdeef2987bad4f04fae657791c48fcc019cbbb95f6381bfbde5d9148abf6531403564160f9374c8dc55386c863") r2 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000780)=""/174, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) r3 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000640)='syz', 0xfffffffffffffff9) add_key$user(&(0x7f0000000740)='user\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, r3) add_key$user(0x0, &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="4700000003000000000000000000000000000000537a217b84b99a00287379c282668054f6341336ddad4ddc3a6a880e93a0880d2768fd52eeac94226f762cb3d6c3886c83a64f396fe899e22b7580ebc141a4af19e640902435c2a96adf328b189b49e00e86cb17086c375b1ef3d091b9f72d"], 0x73) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x20805) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) connect$pptp(r5, &(0x7f0000000840)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x8, 0x1, 'hfsc\x00'}, {0x4}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 10:40:38 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '/dev/fuse\x00'}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x10, 0x0, 0x2}, 0x10) 10:40:38 executing program 4: prctl$PR_SET_MM_MAP(0x35, 0xe, 0x0, 0xb1) 10:40:38 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty=0x2}, "120022ebffff0000"}}}}}, 0x0) 10:40:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) ioctl$FIONREAD(r1, 0x80047456, &(0x7f0000000000)) 10:40:39 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty=0x2}, "120022ebffff0000"}}}}}, 0x0) 10:40:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 10:40:39 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty=0x2}, "120022ebffff0000"}}}}}, 0x0) 10:40:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="390000001300090468fe0700000000000700ff3f04000000450001070000001419001a0006000000020000000208000800005d14dfb51571a4", 0x39}], 0x1) 10:40:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)) 10:40:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23afb16f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:40:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2, 0x2000000000071, 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(r0, 0x80041285, &(0x7f0000000000)) 10:40:39 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x400) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), 0xfffffffffffffffd) 10:40:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_G_CROP(r1, 0xc01456b8, &(0x7f0000000040)={0x0, {0x95, 0x2000}}) 10:40:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x400020000000010, 0x2, 0x0) write(r1, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b070404390000000007000100010039", 0xfdef) 10:40:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r14 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r15 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r16 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r16, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r17 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r17, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r18 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r18, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r19 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r19, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r20 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r21 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r21, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r22 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r22, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r23 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r23, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r24 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r23, r24, 0x0, 0x1000003) 10:40:39 executing program 0: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xbd, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[]}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0xa00}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0xae}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 10:40:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@updsa={0x140, 0x1a, 0x301, 0x0, 0x0, {{@in6=@ipv4={[], [], @loopback}, @in6=@ipv4={[], [], @remote}}, {@in6=@dev, 0x0, 0x33}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 10:40:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x26f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x925, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x3, {0x3, 0x0, "c2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 732.669090][T23503] PF_BRIDGE: br_mdb_parse() with invalid ifindex 10:40:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x10001}) 10:40:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x127, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000030086000a0002000a0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 10:40:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x22, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f00000000c0)=['!/*ppp1vmnet1wlan1$,cgroupwlan1posix_acl_accesswlan1\x00', '$selinux[vboxnet1\x00', 'cgroup\x00'], 0x4e}) 10:40:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) 10:40:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004da000), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000118ffc), 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000007affc), 0x4) close(r2) [ 732.967924][T23525] bridge_slave_1: FDB only supports static addresses 10:40:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r14 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r15 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r16 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r16, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r17 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r17, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r18 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r18, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r19 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r19, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r20 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r21 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r21, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r22 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r22, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r23 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r23, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r24 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r23, r24, 0x0, 0x1000003) 10:40:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03b5b2461179f5f90bba001b50c0da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bc", 0x96}], 0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 733.043760][T23533] bridge_slave_1: FDB only supports static addresses [ 733.053112][T12360] usb 6-1: new high-speed USB device number 24 using dummy_hcd 10:40:40 executing program 2: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000080)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) 10:40:40 executing program 0: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 10:40:40 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x7, 0xb09, 0x80}) 10:40:40 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df82", 0x21) [ 733.295125][T12360] usb 6-1: Using ep0 maxpacket: 8 [ 733.434598][T12360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.446084][T12360] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.459063][T12360] usb 6-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 [ 733.468271][T12360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.478729][T12360] usb 6-1: config 0 descriptor?? [ 733.975241][T12360] smartjoyplus 0003:0925:0005.0012: item fetching failed at offset -724416605 [ 733.984721][T12360] smartjoyplus 0003:0925:0005.0012: parse failed [ 733.991236][T12360] smartjoyplus: probe of 0003:0925:0005.0012 failed with error -22 [ 734.185020][T12446] usb 6-1: USB disconnect, device number 24 [ 734.412196][ C0] net_ratelimit: 26 callbacks suppressed [ 734.412211][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 734.424186][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 734.430421][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 734.436551][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 734.442760][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 734.448805][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 734.812277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 734.818275][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 734.951878][T12446] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 735.132242][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 735.138290][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 735.201894][T12446] usb 6-1: Using ep0 maxpacket: 8 [ 735.322276][T12446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.333356][T12446] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.346301][T12446] usb 6-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 [ 735.355501][T12446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.365020][T12446] usb 6-1: config 0 descriptor?? [ 735.665203][T12446] smartjoyplus 0003:0925:0005.0013: item fetching failed at offset 695791219 [ 735.674669][T12446] smartjoyplus 0003:0925:0005.0013: parse failed [ 735.681190][T12446] smartjoyplus: probe of 0003:0925:0005.0013 failed with error -22 10:40:42 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x49, 0x36, 0x56, 0x10, 0x4dd, 0x9050, 0x36e9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) 10:40:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r14 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r15 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r16 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r16, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r17 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r17, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r18 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r18, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r19 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r19, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r20 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r21 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r21, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r22 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r22, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r23 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r23, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r24 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r23, r24, 0x0, 0x1000003) 10:40:42 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0xa4, 0x57, 0x20, 0xc72, 0x13, 0x69f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x77, 0x82, 0xcb}}]}}]}}, 0x0) 10:40:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) 10:40:42 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000900)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e187a48d30b3", @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x24, 0x0, [@guehdr={0x1}, @guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0x2, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr={0xd}, @guehdr={0x1}]}}}}}, 0x0) [ 735.780123][T12446] usb 6-1: USB disconnect, device number 25 10:40:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000000019, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c) recvfrom(r1, 0x0, 0x0, 0x29766cf7652f72bc, &(0x7f0000000240)=@can, 0x719000) 10:40:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r3, 0x20000000006, &(0x7f00000000c0)) 10:40:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03b5b2461179f5f90bba001b50c0da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bc", 0x96}], 0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 10:40:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r13 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r14 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r15 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r16 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r16, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r17 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r17, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r18 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r18, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r19 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r19, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r20 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r21 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r21, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r22 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r22, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r23 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r23, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r24 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r23, r24, 0x0, 0x1000003) 10:40:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x5, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000007000/0x4000)=nil) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 10:40:43 executing program 0: r0 = memfd_create(&(0x7f0000000240)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000140)="17", 0x1) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0x1fc) [ 736.093676][T12360] usb 5-1: new high-speed USB device number 39 using dummy_hcd 10:40:43 executing program 0: unshare(0x400) r0 = syz_open_dev$radio(&(0x7f0000005600)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) pwritev(r0, 0x0, 0x315, 0x0) [ 736.232750][T12446] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 736.339579][T12360] usb 5-1: Using ep0 maxpacket: 32 [ 736.462126][T12360] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 736.470463][T12360] usb 5-1: config 0 has no interface number 0 [ 736.476772][T12360] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=69.f7 [ 736.481884][T12446] usb 6-1: Using ep0 maxpacket: 16 [ 736.485973][T12360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.500319][T12360] usb 5-1: config 0 descriptor?? [ 736.623969][T12446] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 736.632539][T12446] usb 6-1: config 0 has no interface number 0 [ 736.638749][T12446] usb 6-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=36.e9 [ 736.647980][T12446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.660205][T12446] usb 6-1: config 0 descriptor?? [ 736.704352][T12446] usb 6-1: bad CDC descriptors [ 736.762192][T12360] peak_usb 5-1:0.237 can0: unable to request usb[type=0 value=1] err=-71 [ 736.770762][T12360] peak_usb 5-1:0.237: unable to read PCAN-Chip USB firmware info (err -71) [ 736.845687][T12360] peak_usb: probe of 5-1:0.237 failed with error -71 [ 736.882350][T12360] usb 5-1: USB disconnect, device number 39 [ 736.907919][T12446] usb 6-1: USB disconnect, device number 26 [ 737.511929][T12446] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 737.671925][T12360] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 737.751823][T12446] usb 5-1: Using ep0 maxpacket: 32 [ 737.872060][T12446] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 737.880373][T12446] usb 5-1: config 0 has no interface number 0 [ 737.886740][T12446] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=69.f7 [ 737.896055][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.905331][T12446] usb 5-1: config 0 descriptor?? [ 737.931960][T12360] usb 6-1: Using ep0 maxpacket: 16 [ 738.052555][T12360] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 738.061052][T12360] usb 6-1: config 0 has no interface number 0 [ 738.067326][T12360] usb 6-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=36.e9 [ 738.076506][T12360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.087203][T12360] usb 6-1: config 0 descriptor?? [ 738.144304][T12360] usb 6-1: bad CDC descriptors [ 738.162111][T12446] peak_usb 5-1:0.237 can0: unable to request usb[type=0 value=1] err=-71 [ 738.170738][T12446] peak_usb 5-1:0.237: unable to read PCAN-Chip USB firmware info (err -71) [ 738.284183][T12446] peak_usb: probe of 5-1:0.237 failed with error -71 [ 738.314067][T12446] usb 5-1: USB disconnect, device number 40 [ 738.343702][T12357] usb 6-1: USB disconnect, device number 27 10:40:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, {0x10}}}, 0x24}}, 0x0) 10:40:45 executing program 2: unshare(0x20400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4144, 0x0) 10:40:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03b5b2461179f5f90bba001b50c0da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bc", 0x96}], 0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 10:40:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, '\xa3\x99\xe9\xc5X\x00\x00\x04\x00\x00\x00\x00\x00\xf0u1\xdcaP\xde\xfa\xcan\xdd\xaf\x1b\x8b\x8c6\x18L\x8f\x01;\xe9n\xa3\x1e\xfb\xd2\x9c\xa9\xb9\xd7'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'eS\x97\xebJ\x90\xdc\rK\xbdt0\xf3\xaaP\xc6\xa1zL\xbeF\xf9\xa2\x7fg\x1d\x17\x1cJ$P\xf2\x88I9)\xc1\xe0\xfe\x94h\xa5\xebUeT\xa2\x80;%P.\xf5\xbcE\r_X\xf2\x8b\x16\xe1\x19\x8d', &(0x7f0000b0bfb2), 0x4e, [], [0x2, 0x1]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "b1abe2da02000000e1000099a800890000000000dc98784b49e0007e00002f59"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 10:40:45 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000b80)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000ac0)=0x41064) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)='\x00!', 0x2}], 0x1, 0x0) 10:40:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(r0, 0x0, 0x0) 10:40:46 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/26, 0x1a}], 0x1, 0x0) 10:40:46 executing program 3: r0 = socket(0x1e, 0x801, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:40:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x11, 0x0, 0x2}}) 10:40:46 executing program 5: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x3}, 0x4, 0x0) 10:40:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x20000) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r2, 0x20000) 10:40:46 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000500)=@profile={'stack ', '&://em0ppp1vboxnet0-user\x00'}, 0xa) 10:40:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000005c0)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='memory.low\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x1000000000000110) 10:40:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffee, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001d0011090001000000000000021000001800000014000300fe880000c6210002000000000000007abf89d2b8ac1fab9a06ab4cc116f8a6c341a35208f5e4d90890c315fe156c2dacaf441ec253bc7f2d714f47070a0b3dc347e40207f50a629bebb73cdee1c1ec6c2341cf5c521efab04cd1bdbcaf2526a5b271c30fbdc43860c8ee975fcf5c275e8d63801a518e9ce050ad043a340bc1621160e84a06e360020d000000000000a904661ff658078abf1e8210e20b0021151b6457154df87455"], 0x2c}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492191, 0x0) [ 739.230613][ T32] audit: type=1400 audit(1570531246.277:36): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name="&://" pid=23688 comm="syz-executor.3" [ 740.652384][ C0] net_ratelimit: 26 callbacks suppressed [ 740.652407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 740.664389][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 740.670560][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 740.676774][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 740.683276][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 740.689297][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 741.052248][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 741.058297][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 741.372068][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 741.378135][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:40:48 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479aed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03b5b2461179f5f90bba001b50c0da6218a8106df2858ec973328e5a2c078a3fe3b52020203517e25ee74e82ba80a0fa881e689f7615baf78f08ea33bc", 0x96}], 0x4, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 10:40:48 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045105, &(0x7f0000000000)) 10:40:48 executing program 3: unshare(0x20400) r0 = socket(0x40000000015, 0x400000005, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 10:40:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:48 executing program 2: syz_emit_ethernet(0x6e, &(0x7f000010ef70)={@random="cd390b081bf2", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x87, 0x0, @empty, @mcast2, [], "f601929f106531aa"}}}}}}}, 0x0) 10:40:48 executing program 4: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x20) 10:40:49 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x42002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x200031, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 10:40:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "9ff8058c18fdbaa91e436720fccb5740"}, @md5sig={0x13, 0x0, "fe0f73cf40fbb3b77a0d8f4b7c810743"}, @mptcp=@generic={0x0, 0x7, "155bf52d5f"}, @timestamp={0x8, 0xfffffffffffffe26}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 10:40:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000a00000000000000000000000800190000000000", 0x24) 10:40:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 10:40:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}) 10:40:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000013000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) pwrite64(r3, &(0x7f0000000200)='C', 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000/0x2000)=nil}) 10:40:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 10:40:52 executing program 4: clock_gettime(0x4, &(0x7f00000001c0)) 10:40:52 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x48001, 0x0) ioctl$EVIOCSREP(r0, 0x80045105, 0x0) 10:40:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:52 executing program 2: mbind(&(0x7f0000ba4000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x2ff, 0x56, 0x0) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000000000)=0xc88a, 0x1f, 0x0) 10:40:52 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x1}) 10:40:52 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'lo\x00\x00\x00\x00\b\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x5}) 10:40:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 10:40:52 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}}, 0x1c) 10:40:52 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040), 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="84000800000000002c767000ffffffff0000dffc0c02000000000000000000005b65da62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf511fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700912dbc3080c91745fa158cf0d70d80de9b3a2575848fd2b9c724c88fa309f7f1969136edbd73294c0356675ffff"], 0x82}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) 10:40:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:52 executing program 1: syz_usb_connect(0x0, 0x156, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8b, 0x17, 0x34, 0x2008, 0x525, 0xa4a4, 0x4b4a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x1, 0xe2, 0x82, 0xaf, 0x0, [], [{{0x7, 0x5, 0x81, 0x400000005}}]}}]}}]}}, 0x0) 10:40:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 10:40:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:52 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'lo\x00\x00\x00\x00\b\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x5}) [ 745.982004][T12360] usb 2-1: new high-speed USB device number 65 using dummy_hcd 10:40:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 10:40:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1e", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:40:53 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2}, 0x8) [ 746.230072][T12360] usb 2-1: Using ep0 maxpacket: 8 [ 746.353070][T12360] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 746.361403][T12360] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.371656][T12360] usb 2-1: config 0 has no interface number 0 [ 746.377912][T12360] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.389135][T12360] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=4b.4a 10:40:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x800000204000, @empty}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x5c) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) [ 746.398305][T12360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.410522][T12360] usb 2-1: config 0 descriptor?? 10:40:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000000c0)=0x1a0) 10:40:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'lo\x00\x00\x00\x00\b\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x5}) [ 746.456321][T12360] usbtest 2-1:0.251: couldn't get endpoints, -22 [ 746.462935][T12360] usbtest: probe of 2-1:0.251 failed with error -22 10:40:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x75d, 0x44000122, 0x0) [ 746.656250][T12357] usb 2-1: USB disconnect, device number 65 10:40:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'lo\x00\x00\x00\x00\b\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @multicast1=0xe0000300}}}, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) dup2(r2, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0x5}) [ 746.892355][ C0] net_ratelimit: 26 callbacks suppressed [ 746.892377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 746.904584][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 746.911138][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 746.917515][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 746.924169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 746.930525][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 747.292399][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 747.298501][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 747.452381][T12360] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 747.612106][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 747.618114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 747.692668][T12360] usb 2-1: Using ep0 maxpacket: 8 [ 747.811992][T12360] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 747.820672][T12360] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.830963][T12360] usb 2-1: config 0 has no interface number 0 [ 747.837255][T12360] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.848448][T12360] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=4b.4a [ 747.857629][T12360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.867131][T12360] usb 2-1: config 0 descriptor?? [ 747.915247][T12360] usbtest 2-1:0.251: couldn't get endpoints, -22 [ 747.921987][T12360] usbtest: probe of 2-1:0.251 failed with error -22 [ 748.113753][T12360] usb 2-1: USB disconnect, device number 66 10:40:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001580), 0x4) 10:40:55 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 10:40:55 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) 10:40:55 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x6b6b6b}]) 10:40:55 executing program 5: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/114, 0x72}], 0x10000000000001f5) close(r0) syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') r1 = gettid() tkill(r1, 0x1000000000015) 10:40:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1e", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:40:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001580), 0x4) 10:40:56 executing program 0: timerfd_create(0x1, 0x0) 10:40:56 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 10:40:56 executing program 5: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/114, 0x72}], 0x10000000000001f5) close(r0) syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') r1 = gettid() tkill(r1, 0x1000000000015) 10:40:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1e", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:40:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000040)=@generic={0x0, "097b694adfaa0461b21384023d5067ce27f8496b0aab4522585fbca3aa7023f336918049fadde9895d85ac8669e1d44ecd0153e4c3c5af4b9612399284c14f8ddd21434aac7b4b545bd492cfa17b4cbcd25c026ffb85c7097dba597d4d8c31c0ef62d5c1757c9901d210a862ed0eb010f3fb3c5a1f715a4e8dece2a136b3"}, 0x80) 10:40:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001580), 0x4) 10:40:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000700)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x8001}}) 10:40:56 executing program 5: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/114, 0x72}], 0x10000000000001f5) close(r0) syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') r1 = gettid() tkill(r1, 0x1000000000015) 10:40:56 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce3ad20012009335e8a000000010902240001000000000904b300020cc1470009058d02000000000009050f000000000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x60, 0xf279313cdf53da28, 0xbb, {0xbb, 0x29, "ae14879383d47adcbabc00a1a606a2f13a0a37de8bd4a5333813d6b12464cfc217c8f01dc7bfe554d30d6fb682bd8dd49f86ef2495dd802a8d3d6254544a15dad20622cb9e82bab5f7a1d8b2c22fd1462bacb56f079fc72ae7e2ed304ac896da74f2b2208488723622237238ae7fa19fd4ee5cabe3028e07761d13b2ffe72075174433e8dcf631f8020966552a6c1d325f69ba905599d63ace5f32b7e462b55024a245bd9e9f50beb4a4e8ee745a186836ce3ce93fe0390afd"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x40, 0x14, 0x77, "7284556d1d18441674de45b92f3131f5b1fa0e0a496a61080c6eee61dcfb0b2b7864894d3b8c808a7b5cf467b8a74d02aed125488d3cf4ef1dc145abcba791ee9e613705f5a148a98bdf8cbc0d1e15d14fcd0968df14598eb7e40ddbd7b69849574ed737dbdfd37aaee62c694b644da7387cc1696fbba6"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}}) 10:40:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001580), 0x4) 10:40:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1e", 0x11}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 10:40:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@main, @global=@item_4={0x3, 0x1, 0x2, "8c63c312"}]}}, 0x0}, 0x0) 10:40:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r3}, &(0x7f0000000100)=0x8) 10:40:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x40000081, 0x0, 0x40000021], [0xc1]}) 10:40:56 executing program 5: timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/114, 0x72}], 0x10000000000001f5) close(r0) syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') r1 = gettid() tkill(r1, 0x1000000000015) 10:40:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 10:40:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "f7dce228c48643e5", "b52b606eca9f9e5523384bd8ce5e81bd", "1bb7c172", "3f8d4d5d627f8477"}, 0x28) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x241) [ 749.952748][T12357] usb 4-1: new high-speed USB device number 31 using dummy_hcd 10:40:57 executing program 0: r0 = memfd_create(&(0x7f0000000140)='queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y;\x84\xf0\x00/&\nd\xe5Y\xd5\xf9\xa7-\xdbJ\xad\xd3\xf1\xda\xd7\xa3\xef\xa7(\x97\xf3\xecz*yG\xd7-6\xbbp\x99.\b\x10\x81iTt\x1aK\x01\x9cp\xb2*\xdf\xd7\xe7X\x81\xf8\xc5\x10 \f\x9b\xd1\xa8\xdb\x0f\xf2\f\x9cLE./\x94\x86q\xf6\xd4|\xaa\x12\vy\xbd\x99\x92!\x06:\x82>\xafZ.\xa0\xfcq\x92#\"};\x0e \xf7\xdb@\x00(1\xb9=\xbf\x95\x9dM\x01.\a\xe6\xcf\x01\x93\xd6\xd7\xf9)\xf2\xfd\xd9\x97\xd8\x93d\xa5\xa0\b-\xec\xc6\x94&\xbf*;K\xbe\x1d\xb3\xb2j\xe1\xbf\x12\xf1\xf6\xf2\xf3\xe4r\xf3K\xac\xa9\xbd\xaa\x03B\x0fALK5', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y;\x84\xf0\x00'}) write$P9_RLINK(r2, &(0x7f0000000280)={0x7}, 0x269) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x103a2, @time}) [ 750.054077][T23924] kvm [23920]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 750.083150][T12446] usb 5-1: new high-speed USB device number 41 using dummy_hcd 10:40:57 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/144, 0x10043) [ 750.126311][T23932] kvm [23920]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 10:40:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3f) [ 750.192316][T12357] usb 4-1: Using ep0 maxpacket: 32 [ 750.312698][T12357] usb 4-1: config 0 has an invalid interface number: 179 but max is 0 [ 750.321063][T12357] usb 4-1: config 0 has no interface number 0 [ 750.327512][T12357] usb 4-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 750.337652][T12357] usb 4-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 750.346852][T12357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.425273][T12357] usb 4-1: config 0 descriptor?? [ 750.474217][T12446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.485410][T12446] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 750.501706][T12446] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40 [ 750.510963][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.520633][T12446] usb 5-1: config 0 descriptor?? [ 751.001004][T12446] uclogic 0003:2179:0053.0014: unknown main item tag 0x0 [ 751.010810][T12446] uclogic 0003:2179:0053.0014: hidraw2: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.4-1/input0 [ 751.082086][T12357] rtl_usb: reg 0xec, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 751.090856][T12357] rtl8192cu: Chip version 0x11 [ 751.195263][T12446] usb 5-1: USB disconnect, device number 41 [ 751.291948][T12357] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 751.491937][T12357] rtl_usb: reg 0xfe66, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 751.691978][T12357] rtl_usb: reg 0xfe67, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 751.700971][T12357] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 751.708453][T12357] usb 4-1: USB disconnect, device number 31 [ 751.981925][T12360] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 752.071840][T12357] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 752.321891][T12357] usb 4-1: Using ep0 maxpacket: 32 [ 752.362000][T12360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.373133][T12360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 752.386081][T12360] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.40 [ 752.395227][T12360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.404709][T12360] usb 5-1: config 0 descriptor?? [ 752.442246][T12357] usb 4-1: config 0 has an invalid interface number: 179 but max is 0 [ 752.450654][T12357] usb 4-1: config 0 has no interface number 0 [ 752.457017][T12357] usb 4-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 752.467451][T12357] usb 4-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 752.476645][T12357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.485902][T12357] usb 4-1: config 0 descriptor?? 10:40:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) io_setup(0x1e, &(0x7f00000000c0)=0x0) io_submit(r3, 0x300, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x5ee}]) 10:40:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) 10:40:59 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) fsync(r0) [ 752.705005][T12360] uclogic 0003:2179:0053.0015: unknown main item tag 0x0 [ 752.741427][T12360] uclogic 0003:2179:0053.0015: hidraw2: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.4-1/input0 [ 752.753429][T23955] debugfs: Directory '23955-5' with parent 'kvm' already present! 10:40:59 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000040)={{0xffffff92}, {0x0, 0xffffffffffffffff}}) 10:40:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x28, 0x11, 0x241, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) 10:40:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f20d86635080000000f22d8d8f7ddc9650f300f00509fb800008ec8ace1ebebb9800000c00f326635001000000f306436da7d009f", 0x35}], 0xaaaab7e, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:40:59 executing program 1: write$apparmor_current(0xffffffffffffffff, &(0x7f0000000100)=@hat={'changehat '}, 0x1d) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000080), 0x9c) 10:40:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "8f1537323af75b8a2139fb1cf6201101"}) [ 752.884487][T12360] usb 5-1: USB disconnect, device number 42 [ 752.892298][T12357] rtl8192cu: Chip version 0x10 10:41:00 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x100]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="000800000095"], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x44000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpgrp(0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$KDDISABIO(r4, 0x4b37) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0), 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 10:41:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/49, 0x31}], 0x1, 0x2c) [ 753.132372][ C0] net_ratelimit: 26 callbacks suppressed [ 753.132390][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 753.144430][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 753.150874][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 753.157122][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 753.163562][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 753.169784][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:41:00 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') r1 = syz_open_procfs(0x0, &(0x7f0000865ff5)='comm\x00') sendfile(r1, r0, &(0x7f0000000000)=0x10, 0x800000026064706) 10:41:00 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10:41:00 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xd7, &(0x7f0000000040), &(0x7f00000000c0)=0x3b8c3dfc45cf9699) 10:41:00 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001240)={0xa0, 0x0, 0x2, {{0x4000000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}, 0xa0) [ 753.520597][T23989] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 753.535391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 753.542824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 753.596608][T12357] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 753.622089][T12446] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 753.637412][T12357] usb 4-1: USB disconnect, device number 32 [ 753.793214][T24009] CUSE: unknown device info "" [ 753.798211][T24009] CUSE: DEVNAME unspecified [ 753.874464][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 753.880620][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 753.881153][T24009] CUSE: unknown device info "" [ 753.891592][T24009] CUSE: DEVNAME unspecified 10:41:01 executing program 1: socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x126}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x126}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev}, @gre_common_policy]}}}]}, 0x48}}, 0x0) 10:41:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x40000000000004d, 0x2}], 0xfe72) 10:41:01 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4003, @dev, 'rose0\x00'}}, 0x1e) 10:41:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)) [ 754.002236][T12446] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 754.010634][T12446] usb 5-1: config 0 has no interface number 0 [ 754.010755][T12446] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 754.026183][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.117804][T12446] usb 5-1: config 0 descriptor?? 10:41:01 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuactat\x00\x00\x00\x00\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0xff}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f0000000440)='TRUE', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000480)={{0x6134e6ad}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffa}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 754.176846][T12446] gspca_main: sonixj-2.14.0 probing 0c45:613e 10:41:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0xa927, 0x29, 0x0, 0xffffffffffffffff}) r7 = dup(r6) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeae) 10:41:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@setneightbl={0x1c, 0x43, 0x11, 0x0, 0x0, {0x7}, [@NDTA_NAME={0x8, 0x1, '%\x00'}]}, 0x1b9}}, 0x0) 10:41:01 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc008561b, &(0x7f0000000000)) 10:41:01 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xbb, &(0x7f0000000140), &(0x7f0000000040)=0x8) [ 755.255046][T12446] usb 5-1: USB disconnect, device number 43 [ 756.021873][T12360] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 756.401941][T12360] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 756.410425][T12360] usb 5-1: config 0 has no interface number 0 [ 756.416758][T12360] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 756.425942][T12360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.435467][T12360] usb 5-1: config 0 descriptor?? [ 756.476270][T12360] gspca_main: sonixj-2.14.0 probing 0c45:613e 10:41:03 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10:41:03 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d7849116da165e8efdb73889", 0xc}], 0x1) 10:41:03 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x1, 0x81, 0xffffffffffffff7f}) 10:41:03 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x2040400) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x8, 0x0, 0x0) 10:41:03 executing program 3: r0 = socket$inet6(0xa, 0x20000000080002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) [ 756.773805][T12360] gspca_sonixj: reg_w1 err -71 [ 756.778806][T12360] sonixj: probe of 5-1:0.237 failed with error -71 [ 756.793026][T12360] usb 5-1: USB disconnect, device number 44 10:41:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() rt_sigqueueinfo(r2, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x7}) 10:41:03 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e000000100000000001400000800120002000200000000000000000020006c0003030000000000000000000000000000000000000000000000000b01100014bb000000000000000000800000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 10:41:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x8000000}) 10:41:04 executing program 3: sigaltstack(&(0x7f0000232000/0x3000)=nil, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) 10:41:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x3cd9) 10:41:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x40000084, 0x0, 0x2ff], [0xc1]}) [ 757.269540][T24093] kvm [24092]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 757.292247][T12360] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 757.671946][T12360] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 757.680229][T12360] usb 5-1: config 0 has no interface number 0 [ 757.686607][T12360] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 757.696451][T12360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.706001][T12360] usb 5-1: config 0 descriptor?? [ 757.766376][T12360] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 758.842713][T12446] usb 5-1: USB disconnect, device number 45 10:41:06 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10:41:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000080)=""/255, 0x220}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/112, 0x70}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000007280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 10:41:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000086dd60b409000008000002024300800080000000ffffe0000002ff02000000000000deffffffffffff003c0090780007040060b680fa00000000000000000000000000000000000000ac14ffbb0fce86cd828a3c68172883473ec83a13f12441710586ec553e71d708a9ec6775200220eb88684ef3e97f3678937861327c543a59d7508ddb25cbed79b7286633be0f2701df88b59443f0b111641b1d7dd8c4b313cc619a15335144d6791326a9163443b8f44542628dc396b174ea181732e1c92d994c6e2893754fe22f7ba9cedaea04701d2163f0d1b695ae5da61c4a45055cbf3179e551ca3134f54c5edf9725b7078e02000000f3614630cb334d2875a35dc1d649afb62b364dfb8770131e4f93e99595da4ccac03102bee6a8e439798ba4de053ded66d7117d629b0be650f88fc87b1c7363c5fcef8ee0bf18b5f1308d5604966c602e95f229d64f6a56f1dfb129baf032e7a84ab4e472e054a99e3803816048414e69fe55da600d678d2cc0ca46b52348cfd8874680c3cea1f880e4937ac44701202ce091df074697fee86b09851fbec9494df235a1998c104bc01e13c0ef10433e5c657bbf136f6e84493d5a20a7b8ca75e2ed189524cc9f4149faf4eebff96c045785b29594548b33e0c2810e63e2ae195b956688e596dee796708a3e57c8778b9fdb57a6597090c1c1022420ee1ec468162b3c64250669b348ed96607e23c61195df2499386395735fb9"], 0x0) 10:41:06 executing program 1: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x80ffff, 0x2e, 0x2e, 0x80ffff, 0x5f, 0x5f, 0x5f, 0x854d], 0x0, 0xffffffffffffffff, 0x2, 0x1000000}, 0x3c) 10:41:06 executing program 2: ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000100)={0x10000}) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'\x02\xff\xff'}, &(0x7f0000000100), 0x390, 0xfffffffffffffffb) 10:41:06 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{}, {}, {}], 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) [ 759.372307][ C0] net_ratelimit: 26 callbacks suppressed [ 759.372329][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 759.384414][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 759.390836][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 759.397118][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 759.403613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 759.409869][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 759.433175][T24107] IPVS: ftp: loaded support on port[0] = 21 10:41:06 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) close(r0) 10:41:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67ad7f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001440)='/dev/input/mouse#\x00', 0x401, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, 0x0, 0x0) 10:41:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xb9, 0x54, 0xc9, 0x10, 0x10c4, 0x807a, 0xb30, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0x5a, 0x80, 0xf1}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, &(0x7f0000000040)={0x0, 0x0, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:41:06 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) close(r0) [ 759.734163][T12360] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 759.772528][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 759.778890][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:41:06 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) close(r0) [ 759.892353][T12446] usb 6-1: new high-speed USB device number 28 using dummy_hcd 10:41:07 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) close(r0) [ 759.972834][T12359] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 760.051186][T24107] IPVS: ftp: loaded support on port[0] = 21 [ 760.092567][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 760.098960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 760.108302][T12360] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 760.116640][T12360] usb 5-1: config 0 has no interface number 0 [ 760.122944][T12360] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 760.132102][T12360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.145602][T12360] usb 5-1: config 0 descriptor?? [ 760.186639][T12360] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 760.252243][T12359] usb 2-1: Using ep0 maxpacket: 16 [ 760.312089][T12446] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 760.320299][T12446] usb 6-1: config 0 has no interface number 0 [ 760.327206][T12446] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 760.336633][T12446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.372154][T12359] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 760.380499][T12359] usb 2-1: config 0 has no interface number 0 [ 760.385040][T12446] usb 6-1: config 0 descriptor?? [ 760.386813][T12359] usb 2-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 760.400863][T12359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.426597][T12359] usb 2-1: config 0 descriptor?? [ 760.436420][T12446] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 760.474653][T12359] cp210x 2-1:0.111: cp210x converter detected [ 760.922402][T12359] cp210x 2-1:0.111: failed to get vendor val 0x000e size 678: -71 [ 760.930524][T12359] cp210x 2-1:0.111: GPIO initialisation failed: -71 [ 760.952134][T12359] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 760.959291][T12359] cp210x: probe of ttyUSB0 failed with error -71 [ 760.968373][T12359] usb 2-1: USB disconnect, device number 67 [ 760.975519][T12359] cp210x 2-1:0.111: device disconnected [ 761.310492][T12359] usb 5-1: USB disconnect, device number 46 [ 761.661988][T12360] usb 2-1: new high-speed USB device number 68 using dummy_hcd 10:41:08 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0xdf, 0x84, 0x40, 0xc45, 0x613e, 0x7c88, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xed, 0x0, 0x0, 0x1, 0x47, 0x89}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10:41:08 executing program 2: keyctl$reject(0x13, 0x0, 0x0, 0x203, 0x0) 10:41:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000086dd60b409000008000002024300800080000000ffffe0000002ff02000000000000deffffffffffff003c0090780007040060b680fa00000000000000000000000000000000000000ac14ffbb0fce86cd828a3c68172883473ec83a13f12441710586ec553e71d708a9ec6775200220eb88684ef3e97f3678937861327c543a59d7508ddb25cbed79b7286633be0f2701df88b59443f0b111641b1d7dd8c4b313cc619a15335144d6791326a9163443b8f44542628dc396b174ea181732e1c92d994c6e2893754fe22f7ba9cedaea04701d2163f0d1b695ae5da61c4a45055cbf3179e551ca3134f54c5edf9725b7078e02000000f3614630cb334d2875a35dc1d649afb62b364dfb8770131e4f93e99595da4ccac03102bee6a8e439798ba4de053ded66d7117d629b0be650f88fc87b1c7363c5fcef8ee0bf18b5f1308d5604966c602e95f229d64f6a56f1dfb129baf032e7a84ab4e472e054a99e3803816048414e69fe55da600d678d2cc0ca46b52348cfd8874680c3cea1f880e4937ac44701202ce091df074697fee86b09851fbec9494df235a1998c104bc01e13c0ef10433e5c657bbf136f6e84493d5a20a7b8ca75e2ed189524cc9f4149faf4eebff96c045785b29594548b33e0c2810e63e2ae195b956688e596dee796708a3e57c8778b9fdb57a6597090c1c1022420ee1ec468162b3c64250669b348ed96607e23c61195df2499386395735fb9"], 0x0) 10:41:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 10:41:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) [ 761.911946][T12360] usb 2-1: Using ep0 maxpacket: 16 [ 761.964068][T12446] gspca_stk1135: reg_w 0xf err -71 [ 761.970313][T12446] gspca_stk1135: serial bus timeout: status=0x00 [ 761.977239][T12446] gspca_stk1135: Sensor write failed [ 761.982682][T12446] gspca_stk1135: serial bus timeout: status=0x00 [ 761.989037][T12446] gspca_stk1135: Sensor write failed [ 761.994439][T12446] gspca_stk1135: serial bus timeout: status=0x00 [ 762.000987][T12446] gspca_stk1135: Sensor read failed [ 762.006359][T12446] gspca_stk1135: serial bus timeout: status=0x00 [ 762.012776][T12446] gspca_stk1135: Sensor read failed [ 762.017993][T12446] gspca_stk1135: Detected sensor type unknown (0x0) [ 762.024731][T12446] gspca_stk1135: serial bus timeout: status=0x00 [ 762.031098][T12446] gspca_stk1135: Sensor read failed [ 762.036443][T12446] gspca_stk1135: serial bus timeout: status=0x00 [ 762.042835][T12446] gspca_stk1135: Sensor read failed [ 762.048060][T12446] gspca_stk1135: serial bus timeout: status=0x00 [ 762.052098][T12360] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 762.054607][T12446] gspca_stk1135: Sensor write failed [ 762.054670][T12446] gspca_stk1135: serial bus timeout: status=0x00 [ 762.054699][T12446] gspca_stk1135: Sensor write failed [ 762.063047][T12360] usb 2-1: config 0 has no interface number 0 [ 762.068383][T12446] stk1135: probe of 6-1:0.28 failed with error -71 [ 762.075569][T12360] usb 2-1: New USB device found, idVendor=10c4, idProduct=807a, bcdDevice= b.30 [ 762.086940][T12360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.095635][T12446] usb 6-1: USB disconnect, device number 28 [ 762.114100][T12360] usb 2-1: config 0 descriptor?? [ 762.175795][T12360] cp210x 2-1:0.111: cp210x converter detected [ 762.241944][T12357] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 762.392001][T12360] cp210x 2-1:0.111: failed to get vendor val 0x370b size 1: -71 [ 762.399905][T12360] cp210x 2-1:0.111: querying part number failed [ 762.422153][T12360] cp210x ttyUSB0: failed get req 0x4 size 2 status: -71 [ 762.429368][T12360] cp210x: probe of ttyUSB0 failed with error -71 [ 762.439566][T12360] usb 2-1: USB disconnect, device number 68 [ 762.446931][T12360] cp210x 2-1:0.111: device disconnected [ 762.602453][T12357] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 762.610916][T12357] usb 5-1: config 0 has no interface number 0 [ 762.617193][T12357] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 762.626388][T12357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.636412][T12357] usb 5-1: config 0 descriptor?? [ 762.676914][T12357] gspca_main: sonixj-2.14.0 probing 0c45:613e 10:41:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)='q', 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x87}]) [ 762.722106][T17184] usb 6-1: new high-speed USB device number 29 using dummy_hcd 10:41:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) [ 763.132123][T17184] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 763.140420][T17184] usb 6-1: config 0 has no interface number 0 [ 763.146777][T17184] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 763.155923][T17184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.165555][T17184] usb 6-1: config 0 descriptor?? [ 763.206719][T17184] gspca_main: stk1135-2.14.0 probing 174f:6a31 10:41:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="5ccf"], 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 10:41:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 10:41:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x3, 0x0, [{0x80000008, 0x1000000, 0x3}, {0x1}, {0xd, 0x0, 0x0, 0x2}]}) [ 763.489732][T17184] gspca_stk1135: reg_w 0x0 err -71 [ 763.496069][T17184] gspca_stk1135: serial bus timeout: status=0x00 [ 763.502526][T17184] gspca_stk1135: Sensor write failed [ 763.507943][T17184] gspca_stk1135: serial bus timeout: status=0x00 [ 763.514524][T17184] gspca_stk1135: Sensor write failed [ 763.519920][T17184] gspca_stk1135: serial bus timeout: status=0x00 [ 763.526495][T17184] gspca_stk1135: Sensor read failed [ 763.531804][T17184] gspca_stk1135: serial bus timeout: status=0x00 [ 763.538175][T17184] gspca_stk1135: Sensor read failed [ 763.543451][T17184] gspca_stk1135: Detected sensor type unknown (0x0) [ 763.550117][T17184] gspca_stk1135: serial bus timeout: status=0x00 [ 763.557873][T17184] gspca_stk1135: Sensor read failed [ 763.563197][T17184] gspca_stk1135: serial bus timeout: status=0x00 [ 763.569552][T17184] gspca_stk1135: Sensor read failed [ 763.574956][T17184] gspca_stk1135: serial bus timeout: status=0x00 [ 763.581349][T17184] gspca_stk1135: Sensor write failed [ 763.586813][T17184] gspca_stk1135: serial bus timeout: status=0x00 [ 763.593220][T17184] gspca_stk1135: Sensor write failed [ 763.598728][T17184] stk1135: probe of 6-1:0.28 failed with error -71 [ 763.632991][T17184] usb 6-1: USB disconnect, device number 29 10:41:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0xa, 0x0, "175a0f9cbca5da6643ef12de15d5036177e485000eae00"}) [ 763.829746][T12360] usb 5-1: USB disconnect, device number 47 10:41:11 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) bind(r0, &(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @remote}, 0x80) 10:41:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 10:41:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4000000000004e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100), 0x4) sendto$inet(r0, 0x0, 0xfd53, 0x40000020000806, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00\"\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) sendto(r0, &(0x7f0000000140)="b4", 0x1, 0x0, 0x0, 0x0) 10:41:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 10:41:11 executing program 4: syz_emit_ethernet(0xc0, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @ipv4={[], [], @broadcast}, @local, {[], @icmpv6=@mld={0x87, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 10:41:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x121, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) 10:41:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffd], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:11 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x20400) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x3, '\x00\x00\x00'}, 0x4) 10:41:11 executing program 5: r0 = socket(0x11, 0xa, 0x0) close(r0) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f0000000080), 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) close(r3) pipe(&(0x7f0000000140)) splice(r0, 0x0, r3, 0x0, 0xc0, 0x0) 10:41:11 executing program 4: syz_usb_connect(0x0, 0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000069101040c71b2100c602010203010902400001000000000904c30000cd32a300052406000005240800000d240f01000000000000000000052406000005240000000d240f010000000000000000008433dcfd08f38644c03dca3569ecb235c09bb2b27c"], 0x0) 10:41:11 executing program 1: syz_open_procfs(0x0, &(0x7f00000003c0)='cgroup\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000791000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) r0 = inotify_init() mlock(&(0x7f000000e000/0x4000)=nil, 0x4000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00007a8000)) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) 10:41:12 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/249, 0xf9) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x1000000000e6) [ 765.211881][T12357] usb 5-1: new high-speed USB device number 48 using dummy_hcd 10:41:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000660007081dfffd940101830020200a000900000000000004000000000d00ff7e", 0x24}], 0x1}, 0x0) 10:41:12 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000000)=""/31) 10:41:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x2, 0x0) setrlimit(0x1000000000000007, &(0x7f000068d000)) accept4(r3, 0x0, 0x0, 0x0) 10:41:12 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x570, 0x0) 10:41:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f00000000c0)=0x10000000000000, 0x12) 10:41:12 executing program 3: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7) 10:41:12 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0/../file0\x00') chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000580)='0\x05\x03(\x17\xa8\xb8\xd9\x9a\xe16\x98v}\xcer\x91\xff]\x9cG|\x00\x95\x1e\x1c\xa8\xc3t\x99\x00\xebh/V\xcb\x1d\x92\xbek\xdc2\xfd\x83\xe6V>\xb1\x81\x93q\xf9\x02\xb7\xdb\x02\x9bX \t{\x18\xa5\x94D\x9f\x00b\xe7\xbde\xf9\a{\x05\a\x91(\xdf\xb3r\xf1S\x18:#\xec\xab\x96\xe9\x87\xba~\xb4\x9fC\xe2OJ\xfe\xe2\xe9\x01X2\xbb\x19\xb0\xd2\xa9\xf0\xec\xcb\x9a\b\x15\x19v^\xab\x8cX\x8b\xc9\xe1A{\xa5UwV\"\\\xe8(\x18\x96\xe9\xa6\x13\xd0,\xab(\x9c~\xdd\xd3\xac\xe2n\x96V', 0x1060000, 0x0) syz_open_dev$media(0x0, 0x4, 0x40) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000180)) getpgid(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @ipv4={[], [], @rand_addr=0x2}, 0x8000}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000001c0)="43bf0820306588ba3927e3ccd9c92c5b", 0x10) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r1, r2, 0x1000) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x80}) getpgrp(r4) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffd5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x3, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @ipv4={[], [], @rand_addr=0x2}, 0x8000}, 0x1c) r7 = dup3(r5, r6, 0x80000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f00000001c0)="43bf0820306588ba3927e3ccd9c92c5b", 0x10) fstat(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r7, &(0x7f0000000140)='./file0\x00', r8, r9, 0x1000) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') 10:41:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfff, 0x66}]}) [ 765.572162][T12357] usb 5-1: config 0 has an invalid interface number: 195 but max is 0 [ 765.580547][T12357] usb 5-1: config 0 has no interface number 0 [ 765.613033][ C0] net_ratelimit: 26 callbacks suppressed [ 765.613055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 765.625193][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 765.631650][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 765.637997][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 765.644513][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 765.650815][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:41:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) [ 765.794114][T12357] usb 5-1: New USB device found, idVendor=1bc7, idProduct=0021, bcdDevice= 2.c6 [ 765.803390][T12357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.811470][T12357] usb 5-1: Product: syz [ 765.816211][T12357] usb 5-1: Manufacturer: syz [ 765.820897][T12357] usb 5-1: SerialNumber: syz [ 765.838147][T12357] usb 5-1: config 0 descriptor?? [ 765.884293][T12357] cdc_acm 5-1:0.195: More than one union descriptor, skipping ... [ 766.012430][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 766.018808][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 766.087097][T12360] usb 5-1: USB disconnect, device number 48 [ 766.332214][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 766.338341][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 766.861848][T12357] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 767.222019][T12357] usb 5-1: config 0 has an invalid interface number: 195 but max is 0 [ 767.230433][T12357] usb 5-1: config 0 has no interface number 0 [ 767.392150][T12357] usb 5-1: New USB device found, idVendor=1bc7, idProduct=0021, bcdDevice= 2.c6 [ 767.401365][T12357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.409511][T12357] usb 5-1: Product: syz [ 767.413796][T12357] usb 5-1: Manufacturer: syz [ 767.418433][T12357] usb 5-1: SerialNumber: syz [ 767.424769][T12357] usb 5-1: config 0 descriptor?? [ 767.463401][T12357] cdc_acm 5-1:0.195: More than one union descriptor, skipping ... [ 767.663475][T12357] usb 5-1: USB disconnect, device number 49 10:41:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x1, 0x0, 0x80, 0x2f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f0000000100)={0x1, 0x9, 0x1, 0x6, 0xebe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfff, 0x66}]}) 10:41:15 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 10:41:15 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0) 10:41:15 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) bind$vsock_stream(r0, &(0x7f0000000180), 0x10) 10:41:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x570, 0x0) 10:41:15 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x38, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r2, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 10:41:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfff, 0x66}]}) [ 768.122678][T24310] kvm: pic: non byte read [ 768.127272][T24310] kvm: pic: non byte read [ 768.142499][T24310] kvm: pic: non byte write [ 768.151388][T24310] kvm: pic: non byte read [ 768.189382][T24310] kvm: pic: non byte read [ 768.203831][T24310] kvm: pic: non byte write [ 768.215380][T24310] kvm: pic: non byte read [ 768.259678][T24310] kvm: pic: non byte read 10:41:15 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000002c000b0500000000797a00edffffff00", @ANYRES32, @ANYBLOB="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"/512], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492642, 0x0) 10:41:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xfff, 0x66}]}) [ 768.300204][T24310] kvm: pic: non byte write 10:41:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) recvmsg(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001700)=""/253, 0xfd}], 0x1, &(0x7f0000001940)=""/234, 0xea}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r1) close(r2) [ 768.463790][T24329] kvm: pic: non byte read [ 768.490014][T24329] kvm: pic: non byte read 10:41:15 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10:41:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x3}}) 10:41:15 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xd, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 10:41:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value, 0x8) 10:41:15 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000001040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000001240)={{0x3, 0x0, 0x1, 0x1}}) 10:41:15 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 768.999737][T24362] sctp: [Deprecated]: syz-executor.5 (pid 24362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.999737][T24362] Use struct sctp_sack_info instead 10:41:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000006c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0xfffffffffffffc01) 10:41:16 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 10:41:16 executing program 4: syz_emit_ethernet(0x300300, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 10:41:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="9a08000000610066b81c008ec0c4c1e5d1df2664660f6b7fd58fe818b61b0fc4c2b18c8cc493470000660f38810b0f01c20f22c266b892000f00d8", 0x3b}], 0x47, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:16 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x570, 0x0) 10:41:16 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10:41:16 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='comm\x00') exit(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) 10:41:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b700000001ed01edbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff0000000077000000000000003d400300000000005504000001ed000027000000000002005d44030000000000630a00fe000000001f00000000000000b7000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1b6a69b002e7f3be361917adee9ee1c8a2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4ef154400e807d63cafa2438ec649dc74a1a610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a59faa9100eb53987ad1714e72ba7a54f0c33e63f4240ee3cd4d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef928d236619074d6ebdf098bc908f523d228a40f9411fe7226a4040996e37c4f46756dfc1538ff7f0000279132d5ef8423116cbefaca6f46426000e8d3ac9d8f5a5557785d985a163458731f298d5140c9fe90dc66b257b0c0295afab36f353e1bc1574a6305790a25cdf085aa4192696ebbf416c0820e106e29d9654fce8ff4de960b344788b0ae6e1d41728a7b2014beddf3fbfa6082fbb36c8e235b4a2ea6c63adc3bf02d67b11f8fb0f64009fc03e060847a6c76f8601899040a539e6bd1035869070a4779af7308166882175ad310ee9473842282e6a30946ae94937c0d372233866d49200e2b6aed2c2ba0bd454573d15ecda2"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 10:41:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port1\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x0, 0x1}, {0x40000000000080}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 10:41:16 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10:41:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000940)=0x98) 10:41:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port1\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x0, 0x1}, {0x40000000000080}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 10:41:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffffb3, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001400210100000000000000000a000000", @ANYRES32=r2, @ANYBLOB="080008000000000014000200000000000000000000000000000000011400010000f70000000000000000ffffac1e000114000600000000000900"/68], 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x570, 0x0) 10:41:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet6_opts(r3, 0x29, 0x0, 0x0, 0x0) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 10:41:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f0000000100)='./file1\x00', 0x214140, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) 10:41:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port1\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x0, 0x1}, {0x40000000000080}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 10:41:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x42, &(0x7f0000000040), 0x4) 10:41:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfd, 0xb4, 0xb0, 0x0, 0x1d50, 0x60a1, 0x31c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x83, 0x0, 0x0, 0xee, 0xc9, 0x2a}}]}}]}}, 0x0) 10:41:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f, 0xb]}, 0x2c) 10:41:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port1\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000440)={{0x0, 0x1}, {0x40000000000080}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x20000000000080}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 10:41:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003040), 0x40000000000008a, 0x48045) accept4(r2, &(0x7f0000000180)=@un=@abs, 0x0, 0x0) 10:41:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000080)="2400000018002551075c0165ff0ffc02802000030011000500e1000c080002008000a000", 0x24) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000100)=0x72, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000080)="2400000018002551075c0165ff0ffc02802000030011000500e1000c080002008000a000", 0x24) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) msgget(0x0, 0x684) r4 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r4, &(0x7f0000001000/0x1000)=nil, 0x6000) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x1000) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/123}, 0x83, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0) 10:41:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f, 0xb]}, 0x2c) 10:41:17 executing program 3: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0xffffffc5}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 10:41:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x3b, 0x41, 0x8000000001}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080), 0x0}, 0x18) 10:41:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f, 0xb]}, 0x2c) 10:41:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000405fd55a80297eb78a326170d485465"], 0x14}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) 10:41:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) 10:41:18 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x305f, 0x2e, 0x32e, 0x182e, 0x600005f, 0x80ffff, 0x5f, 0xb]}, 0x2c) 10:41:18 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0xc, &(0x7f0000000000), 0x20a154cc) 10:41:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x3, 0x0, 0x4}, 0x2c) 10:41:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00001a7fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000aaff09)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10:41:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=',', 0x1}], 0x1}, 0xc100) write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="00000000ffffff87000001000000000000"], 0x11) 10:41:18 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070") syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) 10:41:18 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\"'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x10001}, {0x47, 0x1}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x101) write$hidraw(r2, &(0x7f0000000080)='\x00', 0x1e8) 10:41:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x3, 0x0, 0x4}, 0x2c) 10:41:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9a", 0x1}], 0x1}}], 0x29b, 0x0) r3 = socket$nl_xfrm(0x11, 0x3, 0x6) fstat(r3, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r2+30000000}}, 0x0) tkill(r1, 0x20000000014) [ 771.832000][T17184] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 771.862472][ C0] net_ratelimit: 26 callbacks suppressed [ 771.862494][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.874622][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 771.880919][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.887328][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 771.893662][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 771.899654][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 772.071950][T17184] usb 5-1: Using ep0 maxpacket: 8 10:41:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:19 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000440), 0x800000000000120, 0x40008804) 10:41:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)='H', 0x1, 0x4008000, 0x0, 0x0) close(r0) 10:41:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x3, 0x0, 0x4}, 0x2c) 10:41:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) [ 772.192647][T17184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.203795][T17184] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 772.216943][T17184] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 772.226149][T17184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:41:19 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x3, 0x0, 0x4}, 0x2c) [ 772.252186][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 772.258432][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:41:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) [ 772.422811][T17184] usb 5-1: config 0 descriptor?? [ 772.572181][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 772.578483][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 772.943488][T17184] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 772.958055][T17184] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0016/input/input39 [ 773.042562][T17184] keytouch 0003:0926:3333.0016: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 773.148578][T12446] usb 5-1: USB disconnect, device number 50 [ 774.001947][T12446] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 774.241858][T12446] usb 5-1: Using ep0 maxpacket: 8 [ 774.362070][T12446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.373251][T12446] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 774.386198][T12446] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 774.395385][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.404928][T12446] usb 5-1: config 0 descriptor?? 10:41:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:21 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\"'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x10001}, {0x47, 0x1}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x101) write$hidraw(r2, &(0x7f0000000080)='\x00', 0x1e8) 10:41:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) [ 774.832315][T12446] usbhid 5-1:0.0: can't add hid device: -71 [ 774.838579][T12446] usbhid: probe of 5-1:0.0 failed with error -71 [ 774.898247][T12446] usb 5-1: USB disconnect, device number 51 10:41:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) [ 775.282453][T12446] usb 5-1: new high-speed USB device number 52 using dummy_hcd 10:41:22 executing program 5: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/124, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) 10:41:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:22 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201fe0009003c0800240042b2420000000109021b00017600000009040000010209bd000705810700ffff0000bf52cf6794a9d30cac7aab065b89cd538040682586e62ec35df83d920ef6132c7e"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 10:41:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) [ 775.589117][T12446] usb 5-1: Using ep0 maxpacket: 8 10:41:22 executing program 5: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/124, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 775.713051][T12446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.724301][T12446] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 775.737648][T12446] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 775.746865][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.764814][T12446] usb 5-1: config 0 descriptor?? 10:41:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') r2 = dup2(r0, r1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="390000001000090468fe07182b0000000000ff0701000000450001070000001419", 0x21}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x800000000000003, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\x06', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 10:41:23 executing program 5: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/124, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 775.942192][T12357] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 776.182026][T12357] usb 4-1: Using ep0 maxpacket: 8 [ 776.244956][T12446] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 776.258517][T12446] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0017/input/input40 [ 776.302201][T12357] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 776.312864][T12357] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 776.324344][T12357] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 776.335698][T12357] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.b2 [ 776.344898][T12357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.369843][T12446] keytouch 0003:0926:3333.0017: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 776.403039][T12357] hub 4-1:118.0: ignoring external hub [ 776.415728][T12357] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 776.457010][T12357] usb 5-1: USB disconnect, device number 52 [ 777.001965][T24617] usb 4-1: reset high-speed USB device number 33 using dummy_hcd 10:41:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\"'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x10001}, {0x47, 0x1}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x101) write$hidraw(r2, &(0x7f0000000080)='\x00', 0x1e8) 10:41:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) 10:41:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r3, 0x29, 0x1000000004c, &(0x7f0000b67000), &(0x7f00000000c0)=0x4) 10:41:24 executing program 2: setrlimit(0x400000000000007, &(0x7f0000000000)={0x0, 0x8be5}) 10:41:24 executing program 5: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000180)=""/124, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) 10:41:24 executing program 2: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000000)) 10:41:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000001080)={{}, {0x0, 0x1c9c380}}, 0x0) dup2(r2, r1) [ 777.252294][T24617] usb 4-1: Using ep0 maxpacket: 8 [ 777.374940][T24617] usb 4-1: device firmware changed [ 777.387691][T24617] cdc_wdm 4-1:118.0: Error autopm - -16 [ 777.393907][T12446] usb 4-1: USB disconnect, device number 33 [ 777.414776][T17184] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 777.581982][T12446] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 777.681983][T17184] usb 5-1: Using ep0 maxpacket: 8 [ 777.821909][T12446] usb 4-1: Using ep0 maxpacket: 8 [ 777.822170][T17184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.838086][T17184] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 777.851079][T17184] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 777.860266][T17184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.869742][T17184] usb 5-1: config 0 descriptor?? [ 777.952084][T12446] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 777.965305][T12446] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 777.974472][T12446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.092340][ C0] net_ratelimit: 26 callbacks suppressed [ 778.092362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 778.104359][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 778.110791][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 778.116999][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 778.123180][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 778.129151][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 778.224501][T12446] usb 4-1: USB disconnect, device number 34 [ 778.353857][T17184] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 778.366689][T17184] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0018/input/input41 [ 778.457187][T17184] keytouch 0003:0926:3333.0018: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 778.492324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 778.498421][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 778.563934][T17184] usb 5-1: USB disconnect, device number 53 [ 778.812691][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 778.818952][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 779.001895][T12446] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 779.241938][T12446] usb 4-1: Using ep0 maxpacket: 8 [ 779.361961][T12446] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 779.373511][T12446] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 779.385108][T12446] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 779.396508][T12446] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.b2 [ 779.405669][T12446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.453398][T12446] hub 4-1:118.0: ignoring external hub [ 779.464192][T12446] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device 10:41:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000847000)={&(0x7f0000000140)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x2601}, [@algo_auth={0x48, 0x1, {{'rmd160\x00'}}}]}, 0x138}}, 0x0) 10:41:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\"'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, 0x10001}, {0x47, 0x1}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x101) write$hidraw(r2, &(0x7f0000000080)='\x00', 0x1e8) 10:41:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x28001) writev(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 10:41:30 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '&:\n\xd0\x9c\xd3r\xc2\xefU\x05\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc60u\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6) 10:41:30 executing program 0: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x16}]}) 10:41:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(0x0, &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r3 = gettid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000340)='net/igmp6\x00') socket$packet(0x11, 0x2, 0x300) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r0, r1, 0x0, 0x102000006) [ 783.803846][T24617] cdc_wdm 4-1:118.0: Error autopm - -16 [ 783.809804][T12446] usb 4-1: USB disconnect, device number 35 10:41:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:31 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '&:\n\xd0\x9c\xd3r\xc2\xefU\x05\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc60u\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6) [ 783.944271][ T32] audit: type=1400 audit(1570531290.997:37): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=263A0AD09CD372C2EF5505DB8AB24E300D5944DF8F346497DA98F0B453AD6D8A2FCB127375B2AE8BFC030E9A230514289D300B06774494F1EE8AD5379DFED204DD4EE8D1BB83D594CC2086C630750D4C2E9AF281FA937D1B01 pid=24688 comm="syz-executor.3" 10:41:31 executing program 5: unshare(0x40400) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @dev}, 0xa) [ 784.164887][T12446] usb 5-1: new high-speed USB device number 54 using dummy_hcd 10:41:31 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '&:\n\xd0\x9c\xd3r\xc2\xefU\x05\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc60u\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6) [ 784.190007][ T32] audit: type=1400 audit(1570531291.107:38): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=263A0AD09CD372C2EF5505DB8AB24E300D5944DF8F346497DA98F0B453AD6D8A2FCB127375B2AE8BFC030E9A230514289D300B06774494F1EE8AD5379DFED204DD4EE8D1BB83D594CC2086C630750D4C2E9AF281FA937D1B01 pid=24693 comm="syz-executor.3" 10:41:31 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0xc020000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xaaaaaaaaaaaab0f, 0x4, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x708e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 784.332245][ C0] net_ratelimit: 26 callbacks suppressed [ 784.332266][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 784.344710][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 784.351028][ T32] audit: type=1400 audit(1570531291.327:39): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=263A0AD09CD372C2EF5505DB8AB24E300D5944DF8F346497DA98F0B453AD6D8A2FCB127375B2AE8BFC030E9A230514289D300B06774494F1EE8AD5379DFED204DD4EE8D1BB83D594CC2086C630750D4C2E9AF281FA937D1B01 pid=24706 comm="syz-executor.3" [ 784.351250][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 784.390541][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 784.396999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 784.403252][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:41:31 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000002c0)={'stack ', '&:\n\xd0\x9c\xd3r\xc2\xefU\x05\xdb\x8a\xb2N0\rYD\xdf\x8f4d\x97\xda\x98\xf0\xb4S\xadm\x8a/\xcb\x12su\xb2\xae\x8b\xfc\x03\x0e\x9a#\x05\x14(\x9d0\v\x06wD\x94\xf1\xee\x8a\xd57\x9d\xfe\xd2\x04\xddN\xe8\xd1\xbb\x83\xd5\x94\xcc \x86\xc60u\rL.\x9a\xf2\x81\xfa\x93}\x1b\x01\x00\x00\x80\x00\x00\x00\x00\xba\xecsb\x02\xc1\x83\xa1\xa0h\x9c`\x94\x8f<\xd9\xc5\xf3\x18\xfe\x02\xa9\x8c\xbe\xfa\xd7\xc7\xe6\xf3\xf4\xcd\x05\xf5\xf1\xe0\xd2;n=$_\xc7aS\xe6\x13\xae\x18r\"\xe4\xd5\xf25#x\xcf\x04C\xfc\xd2K\x9aLB\x93\x1d\xc0\xbcX\xc3\xbfS\xca+\x0f4\xd8EW\xf9\xbaMy\xa9\xe8wsMB\xaac\xa9\xd6p\x02n\xa1f\xae2X 5Oam\xebW\x14O\x83\x7fX9\xb0\xb3\x90\x1c1_r\xc8s=\xc6\xb5\xb3'}, 0xe6) [ 784.453924][T12446] usb 5-1: Using ep0 maxpacket: 8 10:41:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) [ 784.582912][T12446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.593989][T12446] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 10:41:31 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) [ 784.596356][ T32] audit: type=1400 audit(1570531291.627:40): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=263A0AD09CD372C2EF5505DB8AB24E300D5944DF8F346497DA98F0B453AD6D8A2FCB127375B2AE8BFC030E9A230514289D300B06774494F1EE8AD5379DFED204DD4EE8D1BB83D594CC2086C630750D4C2E9AF281FA937D1B01 pid=24716 comm="syz-executor.3" [ 784.606994][T12446] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 784.607061][T12446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.657701][T24713] kvm: pic: non byte write [ 784.660259][T24713] kvm: pic: non byte write [ 784.667839][T24713] kvm: pic: non byte write [ 784.674250][T24713] kvm: pic: non byte write [ 784.710706][T12446] usb 5-1: config 0 descriptor?? [ 784.729800][T24713] kvm: pic: non byte write [ 784.735611][T24713] kvm: pic: non byte write [ 784.740789][T24713] kvm: pic: non byte write [ 784.742450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 784.746087][T24713] kvm: pic: non byte write [ 784.751479][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 784.755703][T24713] kvm: pic: non byte write [ 784.766515][T24713] kvm: pic: non byte write [ 784.885427][T24703] debugfs: Directory '24703-4' with parent 'kvm' already present! [ 785.052283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 785.058660][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 785.608292][T12446] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 785.623305][T12446] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0019/input/input42 [ 785.712539][T12446] keytouch 0003:0926:3333.0019: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 785.754390][T12446] usb 5-1: USB disconnect, device number 54 10:41:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0x4) fcntl$addseals(r1, 0x409, 0x4) fallocate(r1, 0x0, 0x0, 0x1) 10:41:33 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd3, 0x2f, 0x1d, 0x20, 0x17cc, 0x1010, 0x7b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x81, 0x0, 0x0, 0xe9, 0x7a, 0xfb}}]}}]}}, 0x0) 10:41:33 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 10:41:33 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) socket$kcm(0x29, 0x5, 0x0) 10:41:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38f37fd9a040c4d5415a871b0f01"], 0x0, 0xe}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10:41:33 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc058534f, &(0x7f0000000480)={0x1}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 10:41:33 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 10:41:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000001c0)="1414d59e6826b40f27000000", 0xc) 10:41:33 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 10:41:33 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) [ 786.671967][T12446] usb 6-1: new high-speed USB device number 30 using dummy_hcd 10:41:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x2}, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:41:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc02c5341, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfdfdffff}) 10:41:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r1, 0x84, 0x71, &(0x7f0000dcffe8)=""/24, &(0x7f0000000080)=0x18) [ 786.894516][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000009 [ 786.912345][T12446] usb 6-1: Using ep0 maxpacket: 32 [ 786.917764][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000001b [ 786.947053][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000056 [ 786.956946][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000007 [ 786.969963][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000042 [ 786.992429][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000007d [ 787.005671][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000002e [ 787.032139][T12446] usb 6-1: config 0 has an invalid interface number: 129 but max is 0 [ 787.036516][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000069 [ 787.040564][T12446] usb 6-1: config 0 has no interface number 0 [ 787.058517][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x4000001a [ 787.069676][T24773] kvm [24771]: vcpu0, guest rIP: 0xc5 Hyper-V unhandled rdmsr: 0x40000055 [ 787.232243][T12446] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 7.b9 [ 787.241439][T12446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.249801][T12446] usb 6-1: Product: syz [ 787.254197][T12446] usb 6-1: Manufacturer: syz [ 787.258957][T12446] usb 6-1: SerialNumber: syz [ 787.265138][T12446] usb 6-1: config 0 descriptor?? [ 787.512460][T12446] snd-usb-audio: probe of 6-1:0.129 failed with error -71 [ 787.521478][T12446] usb 6-1: USB disconnect, device number 30 [ 788.271924][T12446] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 788.511940][T12446] usb 6-1: Using ep0 maxpacket: 32 [ 788.632019][T12446] usb 6-1: config 0 has an invalid interface number: 129 but max is 0 [ 788.640401][T12446] usb 6-1: config 0 has no interface number 0 [ 788.802024][T12446] usb 6-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 7.b9 [ 788.811278][T12446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.819495][T12446] usb 6-1: Product: syz [ 788.823843][T12446] usb 6-1: Manufacturer: syz [ 788.828601][T12446] usb 6-1: SerialNumber: syz [ 788.834812][T12446] usb 6-1: config 0 descriptor?? [ 789.092038][T12446] snd-usb-audio: probe of 6-1:0.129 failed with error -71 [ 789.101007][T12446] usb 6-1: USB disconnect, device number 31 10:41:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"def3fbe076f8425574b960f14696aedc"}}}}, 0x90) 10:41:36 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x80044327, 0x0) 10:41:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x5b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0xb0, {0x2a, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b92ca224096dfe3b4f3357a976e0dfdbbfc5760931b9f7e726ae899ff1304c0824c42b162f560ea99673a88809334b1da116c2a2d7a7b0246b4b354b0bdab38a5916ff6b5f3ead1f37ebb2e24d7b987d80fdf3b888f3c035220c1ed6c4c4f5e2c7e03c7424a08c6f4668d567392928a7a4cce583831647f948bb63d99999ae5df8c5e549fa61c04455446169b12832"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10:41:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x0, 0x15, 0x0, 0x0, &(0x7f0000000080)=[{}]}) 10:41:36 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) 10:41:36 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc058534f, &(0x7f0000000480)={0x1}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 10:41:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2d) 10:41:36 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x9}) 10:41:36 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000080)={@local, @local, [], {@generic={0x8864, "42a703000000"}}}, 0x0) recvmmsg(r0, &(0x7f000000c5c0)=[{{&(0x7f0000006f00)=@ipx, 0x80, 0x0}}], 0x1, 0x22, 0x0) 10:41:36 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local, @dev, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @broadcast, {[@noop, @timestamp={0x44, 0x10, 0x9, 0x1, 0x0, [{[@loopback]}, {}]}]}}, @icmp=@timestamp}}}}, 0x0) 10:41:36 executing program 0: mknod(&(0x7f0000f80000)='./file0\x00', 0x1041, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) 10:41:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0xfffffffffffffffe}) [ 789.732248][T12446] usb 4-1: new high-speed USB device number 36 using dummy_hcd 10:41:36 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000080)={@local, @local, [], {@generic={0x8864, "42a703000000"}}}, 0x0) recvmmsg(r0, &(0x7f000000c5c0)=[{{&(0x7f0000006f00)=@ipx, 0x80, 0x0}}], 0x1, 0x22, 0x0) 10:41:36 executing program 5: syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @random="cca784fb14ec", [], {@ipv6={0x86dd, {0x0, 0x6, "7415a0", 0x38, 0x3c, 0x0, @local, @local, {[@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @broadcast}}, @calipso={0x7, 0x8}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7439a8", 0x0, "04fb63"}}}}}}}, 0x0) [ 789.972163][T12446] usb 4-1: Using ep0 maxpacket: 8 [ 790.092122][T12446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.103254][T12446] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 790.116228][T12446] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 790.125379][T12446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.135027][T12446] usb 4-1: config 0 descriptor?? [ 790.572141][ C0] net_ratelimit: 26 callbacks suppressed [ 790.572154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 790.584248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 790.590408][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 790.596654][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 790.602863][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 790.608835][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 790.634391][T12446] samsung 0003:0419:0600.001A: ignoring exceeding usage max [ 790.644526][T12446] samsung 0003:0419:0600.001A: ignoring exceeding usage max [ 790.652095][T12446] samsung 0003:0419:0600.001A: usage index exceeded [ 790.658851][T12446] samsung 0003:0419:0600.001A: item 0 2 2 2 parsing failed [ 790.666726][T12446] samsung 0003:0419:0600.001A: parse failed [ 790.672860][T12446] samsung: probe of 0003:0419:0600.001A failed with error -22 [ 790.885462][T12446] usb 4-1: USB disconnect, device number 36 [ 790.972226][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 790.978294][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 791.292187][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 791.298297][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 791.651888][T12446] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 791.901963][T12446] usb 4-1: Using ep0 maxpacket: 8 [ 792.022377][T12446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.033587][T12446] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 792.046709][T12446] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 792.055990][T12446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.065506][T12446] usb 4-1: config 0 descriptor?? [ 792.364279][T12446] samsung 0003:0419:0600.001B: ignoring exceeding usage max [ 792.374416][T12446] samsung 0003:0419:0600.001B: ignoring exceeding usage max [ 792.381969][T12446] samsung 0003:0419:0600.001B: usage index exceeded [ 792.388720][T12446] samsung 0003:0419:0600.001B: item 0 2 2 2 parsing failed [ 792.396295][T12446] samsung 0003:0419:0600.001B: parse failed [ 792.402453][T12446] samsung: probe of 0003:0419:0600.001B failed with error -22 [ 792.442414][T12446] usb 4-1: USB disconnect, device number 37 10:41:39 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000040), 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_AF={0x8}]}, 0x44}}, 0x0) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r0) 10:41:39 executing program 0: mknod(&(0x7f0000f80000)='./file0\x00', 0x1041, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) 10:41:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) write(r0, &(0x7f0000000000)="bc", 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f00000001c0), 0xa5) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)) 10:41:39 executing program 5: syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @random="cca784fb14ec", [], {@ipv6={0x86dd, {0x0, 0x6, "7415a0", 0x38, 0x3c, 0x0, @local, @local, {[@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @broadcast}}, @calipso={0x7, 0x8}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7439a8", 0x0, "04fb63"}}}}}}}, 0x0) 10:41:39 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000080)={@local, @local, [], {@generic={0x8864, "42a703000000"}}}, 0x0) recvmmsg(r0, &(0x7f000000c5c0)=[{{&(0x7f0000006f00)=@ipx, 0x80, 0x0}}], 0x1, 0x22, 0x0) 10:41:39 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc058534f, &(0x7f0000000480)={0x1}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 10:41:39 executing program 5: syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @random="cca784fb14ec", [], {@ipv6={0x86dd, {0x0, 0x6, "7415a0", 0x38, 0x3c, 0x0, @local, @local, {[@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @broadcast}}, @calipso={0x7, 0x8}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7439a8", 0x0, "04fb63"}}}}}}}, 0x0) 10:41:39 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000080)={@local, @local, [], {@generic={0x8864, "42a703000000"}}}, 0x0) recvmmsg(r0, &(0x7f000000c5c0)=[{{&(0x7f0000006f00)=@ipx, 0x80, 0x0}}], 0x1, 0x22, 0x0) 10:41:39 executing program 0: mknod(&(0x7f0000f80000)='./file0\x00', 0x1041, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) 10:41:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0xfffffe85) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8ec0, 0x3) 10:41:39 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2d, 'rdma'}]}, 0x6) 10:41:40 executing program 5: syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @random="cca784fb14ec", [], {@ipv6={0x86dd, {0x0, 0x6, "7415a0", 0x38, 0x3c, 0x0, @local, @local, {[@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @broadcast}}, @calipso={0x7, 0x8}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7439a8", 0x0, "04fb63"}}}}}}}, 0x0) 10:41:40 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000700)={0x0, 0x3, 0x1ff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000880)={[0x7ff, 0x1a97b7a2]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000580)=""/85, &(0x7f0000000600)=0x55) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:40 executing program 0: mknod(&(0x7f0000f80000)='./file0\x00', 0x1041, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) 10:41:40 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200ff8e00000000006c15e1b50000001833400014000200fe8800000000a2cd9700000000002200000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) inotify_rm_watch(r2, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f00000000c0)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:41:40 executing program 0: creat(&(0x7f0000000700)='./bus\x00', 0x0) getxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000300)=@random={'security.', '\x00'}, 0x0, 0x0) 10:41:40 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 793.279410][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:41:40 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0xc058534f, &(0x7f0000000480)={0x1}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 10:41:40 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 10:41:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003040), 0x40000000000008a, 0x48045) accept4(r3, 0x0, 0x0, 0x0) 10:41:40 executing program 4: socket$vsock_dgram(0x28, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) pipe(&(0x7f00000003c0)) r0 = socket$inet6(0xa, 0x2010000000802, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 10:41:40 executing program 3: set_mempolicy(0x2, &(0x7f0000000040)=0x8000000000000008, 0x9) 10:41:40 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) 10:41:40 executing program 4: socket$inet(0x2, 0x0, 0x0) 10:41:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0xe5}, @TCA_FQ_BUCKETS_LOG={0x8}, @TCA_FQ_PLIMIT={0x8, 0x3}, @TCA_FQ_FLOW_REFILL_DELAY]}}]}, 0x60}}, 0x0) 10:41:41 executing program 5: r0 = socket(0x400000010, 0x802, 0x0) write(r0, &(0x7f0000000040)="fc00000048000701ac092500090007000aab6005030000000000e293210001c000000000000000cb10d8311845845900fa2c1ec28656aaa79b384b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295edbabc7c3f2eeb57d43dd16b176e83df150c3b8829411f46a6b567b47c095387e6e158a1ad0a4f41f0d48f6f0000080548deac270e33429f3794dec896592d69d381873cf1587c612d2e26ce36f071f0c22700"/252, 0xfc) [ 794.015286][T24932] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 794.024939][T24932] sch_fq: defrate 0 ignored. [ 794.127044][T24943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 10:41:41 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000002c0012000c00010062726964676500001c00020008002b00030000000891e10254c03b4a9100270000000080"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:41:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0xe5}, @TCA_FQ_BUCKETS_LOG={0x8}, @TCA_FQ_PLIMIT={0x8, 0x3}, @TCA_FQ_FLOW_REFILL_DELAY]}}]}, 0x60}}, 0x0) 10:41:41 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x5, 0x3, 0x0, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "d044937df9141cd4"}}, 0x200005c8}}, 0x0) 10:41:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)) 10:41:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc001, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 10:41:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 794.912137][T24961] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 794.921561][T24961] sch_fq: defrate 0 ignored. 10:41:42 executing program 0: signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x3) [ 794.966958][T24960] netlink: 'syz-executor.5': attribute type 43 has an invalid length. [ 794.975397][T24960] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:42 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="18000000000000000100000001000000bd00001100000000"], 0x18}}], 0x1, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 10:41:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xfc], [], @loopback=0xac141413}}, 0x1c) 10:41:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0xe5}, @TCA_FQ_BUCKETS_LOG={0x8}, @TCA_FQ_PLIMIT={0x8, 0x3}, @TCA_FQ_FLOW_REFILL_DELAY]}}]}, 0x60}}, 0x0) 10:41:42 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00') exit(0x0) fstat(r0, &(0x7f0000000280)) [ 795.162063][T24981] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 795.171489][T24981] sch_fq: defrate 0 ignored. 10:41:42 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x401}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x72c6831c) 10:41:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x44}, {0x6}]}) 10:41:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:41:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0xe5}, @TCA_FQ_BUCKETS_LOG={0x8}, @TCA_FQ_PLIMIT={0x8, 0x3}, @TCA_FQ_FLOW_REFILL_DELAY]}}]}, 0x60}}, 0x0) 10:41:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x54b) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18}, 0x18) [ 795.505763][T25002] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 795.516166][T25002] sch_fq: defrate 0 ignored. [ 795.607798][ T32] audit: type=1326 audit(1570531302.657:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25004 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 10:41:42 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:42 executing program 2: syz_emit_ethernet(0x403, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0xb, {0x3c7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local={0xac, 0x223}, @dev={0xac, 0x70}, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x3f000000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:41:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x7fff]}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, &(0x7f0000000240)={0x1, 0x0, 0x1000, 0xfffffffffffffe53, &(0x7f0000000080)="7437010f85051f98e92c980bd64acc7e4a4f1d2ec183adfd007b83b5380fc3fc0a0d237a55f58dfb7d0846732529d782c544f229d5bf13f67e05d3b515a0099d1150502098a475e1693bdf98c2eda267374ac32920d12078cd4f3c1a0ee60c02a371b89c08009a13abd0d487e5c91921247666b163b260ccec3454", 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000340)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000002560b700eff0ffff"]) ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000000)={0x0, 0x2}) 10:41:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r0, &(0x7f0000000080)="240000001a005f0014f9f407000904000200"/36, 0x24) [ 795.972055][T25015] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 10:41:43 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x80140000000af01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af21, &(0x7f0000000040)) [ 796.029330][T25021] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 10:41:43 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x20400) bind$can_raw(r0, &(0x7f0000000140), 0x10) 10:41:43 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, 0x90) 10:41:43 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 796.365431][ T32] audit: type=1326 audit(1570531303.417:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25004 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 10:41:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000004e0007041dfffd946f6105000a0a0000fe02000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 10:41:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000240)=[@increfs={0x40046305}, @transaction_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}}], 0x167, 0x0, 0x0}) 10:41:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000014000b09000000001e0000000a400000", @ANYRES32=r2, @ANYBLOB="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"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:41:43 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @raw_data="f3da50ad25ea3f394e563132fd0091b1baf64d4d419ff12a746016c1fecaedfee5bcd406449c7dfb67a6376bfad9d4a2cace503dfd2ef2e92d8e21897a4a4e77c3d4c36143bb4c61ef7efbd2738273d0ebbed96cac0c5da684703b3a318293603207c3590d5cf5c4550f87561475bb7ea0d7f9c01403eadb72acdf8854f4323d09d9c9a859a8ba9774d5b525d6bc9eb370a7e09e58f371a2365d8b2b911ca49e449e6b104af537b924b12952c2828a7a3ab8da75cb2b0b6eb0436d7f7985f969ba77e364ad403773"}) [ 796.478152][T25052] binder: 25047:25052 unknown command 0 [ 796.484128][T25052] binder: 25047:25052 ioctl c0306201 20000000 returned -22 [ 796.525099][T25056] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:41:43 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:43 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 10:41:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000006400)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x6}]}}}], 0x18}}], 0x1, 0x0) 10:41:43 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$TUNSETOWNER(r0, 0x40026102, 0x0) 10:41:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000014000b09000000001e0000000a400000", @ANYRES32=r2, @ANYBLOB="140001006701000000000000000d000000000a010800080000932bd1f7c4b96cbf9fb374e648fce30ff12e004b1c014d7ba0def4f4f043f7b0cfdaa74ea367b0275c3089543e5af24da7ca72f14033a5e2c3b44158b5a05b597e50bc0c6e0cf549b2f10a3e0395cc112687ec22a3d3ca750a21245206b04f907bdf1c2adb7b441f16d46532b9025f77637c42f51e06f4d128861fc279bef45e8d178ee9632ef736d971688297c7acc8489e7142a5bcbfe94bd6654951d8844d3c958341559426586993aff467acc27ae54d045b1e81df3cb70e88b0e731a7c77679ec00000000000000145f7a8203b6cf5baa12160b3ee00600008b365c94ad3c5b3b8e8775fa011c696d0100000000000010000002c31c48ade3a284f0109c696cdf0bd7b2d831f6bf63f733b8a30d5d2b3bbe7e94b3a41489bfb8ed37f8d90169ac5a8014bfd26c79e56bf98b7215a5584d55c1658eb8d1f3ffc41c0023431ad926342053578b5bcc3270b3e8d07d2774d33f6ad21f5ce7acf5cabbe0c63915ced729659c165e8f2337e12488f4b2fd9f8951c964ab1cc501c97f58c4f7393868b6583ed2427fcd8ff7f8ad839795f1c9509656e767bff5811339d78670d79c2eae1cbd9d2f66bf2197d9c08cda60a3c6ee603ef61ee71e3930c71f5cb4a3f4906b719562109088d4dfbaf7cec4ed5e56770e4f1805dabd552d331c506fa7331b73533fc1e095c1332dd852b8335d46e88befb1fc522a9e1fef398179d017c33af20eb99aba196b05bbc44456c0a43bde4799fb886c3982a9c51b47aa52eab9179072af9ed440c110a18a7f87fbd81cd53a81619ced577716fe8b8f43bab0e3ca5aeab07eb7e775c7caa2f83f259fb137ec58bb501fe9dabcb4c343b8495574ca0de2a3b1f97f00bcff070000000000008811d7819f99bb098f1cd39aa9ebc9e64c6793066004e82e3e593d9c21afa3a3bd8e595d98f29761c3b3bbc6cd55be8af72252953ea899e5db5e8e9703388cf4ff85d8b27b0a087b007bb4896df61ec8c1087cc61905de8e2b1b5784bff363d71ef5fb9506f3daee4684de31d8ec5f47feb3dfc0ed661e345cee4431b009f5ad8f4c5b9cfacc30ecf7ace89c7b264d827b5458988d94a803a59e0cfdf6c25dbc0ba2001bca8c07f7000000000000000000bda1ed5610bd9020780ea02704466abcb6d903d18dd5d0510f0000000000000000247bacd90d8563ea79ed3858c89fbc69c261b68960d246c4c26aab3fc8b9f733cc594a3b5abb25d0545b45d2fb11851cb72fcaacaea072678aba5da47e768c8872a637e27788621cdb09e74c"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:41:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 796.795872][T25065] kvm [25064]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 796.812307][ C0] net_ratelimit: 26 callbacks suppressed [ 796.812327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 796.824571][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 796.831161][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 796.837571][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:41:43 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000740)={0x0, 0x0}) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000180)={0x0}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) 10:41:43 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 10:41:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000014000b09000000001e0000000a400000", @ANYRES32=r2, @ANYBLOB="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"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:41:43 executing program 3: r0 = socket$kcm(0x2b, 0x44000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 796.844254][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 796.850606][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 796.885013][T25065] kvm [25064]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 797.003183][T25065] kvm [25064]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 10:41:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000014000b09000000001e0000000a400000", @ANYRES32=r2, @ANYBLOB="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"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:41:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 'syz1\x00'}) [ 797.212382][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 797.218784][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 797.532176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 797.538266][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:41:44 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x10000000002) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1}) 10:41:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffff401870cc, &(0x7f0000000040)) 10:41:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$int_out(r0, 0x80804531, &(0x7f0000001180)) 10:41:44 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/130, 0x9a2733f6c2698b56, 0x20000180, 0x0) [ 797.722445][T25113] kvm [25111]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 797.747800][T25113] kvm [25111]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 797.769772][T25113] kvm [25111]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 10:41:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) dup2(r0, r1) read(r1, 0x0, 0xfdd6) 10:41:44 executing program 2: socket(0x28, 0x0, 0x28) 10:41:44 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(r1, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 10:41:45 executing program 0: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40044102, 0x0) 10:41:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x15) [ 798.168918][T25146] kvm [25144]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 798.215255][T25146] kvm [25144]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 798.245940][T25146] kvm [25144]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 [ 798.262261][T12446] usb 4-1: new high-speed USB device number 38 using dummy_hcd 10:41:45 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 10:41:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000240)=0x20) 10:41:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4000001000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 10:41:45 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r0, r0, 0x800000000016, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={&(0x7f0000004180)=""/4096, 0x1000}) 10:41:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) writev(r0, &(0x7f0000000880)=[{&(0x7f00000000c0)="a7", 0x1}], 0x1) 10:41:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 798.503531][T25168] kvm [25167]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 798.522751][T12446] usb 4-1: Using ep0 maxpacket: 8 [ 798.557177][T25168] kvm [25167]: vcpu0, guest rIP: 0xcc kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 798.599211][T25175] input: syz1 as /devices/virtual/input/input43 [ 798.618036][T25168] kvm [25167]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0x1 10:41:45 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x31, 0x0, 0xd4, 0x8, 0x545, 0x8080, 0x30a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf4, 0x0, 0x0, 0xc1, 0xfa, 0x10}}]}}]}}, 0x0) [ 798.654673][T12446] usb 4-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 798.665245][T12446] usb 4-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.676579][T12446] usb 4-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 798.685774][T12446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.811658][T12446] hub 4-1:118.0: ignoring external hub [ 798.840335][T12446] cdc_wdm 4-1:118.0: cdc-wdm0: USB WDM device [ 799.031928][T14973] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 799.281924][T14973] usb 1-1: Using ep0 maxpacket: 8 [ 799.402011][T14973] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 799.410307][T14973] usb 1-1: config 0 has no interface number 0 [ 799.416866][T14973] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 799.426058][T14973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.435755][T14973] usb 1-1: config 0 descriptor?? [ 799.674956][T14973] usb 1-1: USB disconnect, device number 35 [ 800.451989][T14973] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 800.691964][T14973] usb 1-1: Using ep0 maxpacket: 8 [ 800.812112][T14973] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 800.820419][T14973] usb 1-1: config 0 has no interface number 0 [ 800.826730][T14973] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 800.836078][T14973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.845797][T14973] usb 1-1: config 0 descriptor?? [ 801.083501][T14973] usb 1-1: USB disconnect, device number 36 [ 803.052156][ C0] net_ratelimit: 26 callbacks suppressed [ 803.052169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 803.064185][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 803.070385][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 803.076699][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 803.082941][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 803.088905][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:41:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000180)=0x32a) 10:41:50 executing program 5: capset(&(0x7f0000581ff8)={0x20080522}, &(0x7f0000000040)) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000000)={'tunl0\x00', @empty=[0x0, 0x0, 0x43]}) 10:41:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@bridge_dellink={0x20, 0x11, 0x1}, 0x20}}, 0x0) 10:41:50 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESDEC], @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00010000020000000000000000000000a84db492e2736dbac0698e4f5443481c3be75407ea171e0cc6e2bf9085cc7ef614ddfd8cbe5edcd20990a1efd0bb0713c8d790e56530a47199f9197b751019196ac51c0c040cf47ede99a23e8a94f6c14a33a10f8c1370fd8f07b89755fed5"], 0x6}}, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000040)={0x0, 0x40, 0x2, &(0x7f0000000000)=0x5}) sendmsg$can_bcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000540)={0x5, 0x0, 0x0, {}, {}, {0x2}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "63c2eb669d6a5694"}}, 0x48}}, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000080)=""/27) 10:41:50 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r0, r0, r0}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f00000004c0)={&(0x7f0000000100)={'rmd320-generic\x00'}}) 10:41:50 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000240), 0xffffffffffffff28, 0x0) [ 803.174537][T25132] cdc_wdm 4-1:118.0: Error autopm - -16 [ 803.191576][T12446] usb 4-1: USB disconnect, device number 38 10:41:50 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={r3, 0x1, 0x6, @remote}, 0x10) 10:41:50 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000002380)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, @icmp=@parameter_prob={0x8, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 10:41:50 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10:41:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f00000001c0)='./file0/file0\x00') lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x2) read$FUSE(r0, 0x0, 0x0) 10:41:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x169, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4}}]}, 0x74}}, 0x0) [ 803.452359][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 803.458679][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 803.495902][T25217] device veth0_to_bridge entered promiscuous mode 10:41:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000280008001c000100000000000000000000000000000000000000000002000000080002000000000032d3fc0c9300a6a5b790ae0d8dbf095ba0496f34165c2ed11dbf61345ffd2f93f7937307f0f7e236d60f22d6e3b341fc8722137427e5d9fa6d2f765fe91fbcdd9e3eb3457075b75184ff51119cdf900fd6ce1363e76374b969e0e0a83e61a81ccff2f5bc36e592ce7ce23e64579eb3f60b1578517fe0f7b06adb5f1a55c2dcf3505774814357"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x11, 0x507, 0x0, 0x0, {0x0, r5}}, 0xd4}}, 0x0) 10:41:50 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) unshare(0x400) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000000100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2002}}) [ 803.539574][T25216] device veth0_to_bridge left promiscuous mode [ 803.600383][T25217] device veth0_to_bridge entered promiscuous mode [ 803.646192][T25228] __nla_validate_parse: 1 callbacks suppressed [ 803.646216][T25228] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 803.666267][T25216] device veth0_to_bridge left promiscuous mode 10:41:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="9033877ace25a0cd47de5752f2fe725302f5297240df794a3f9e8efd1c159b2bb4cfdc71f2cd4ccab950100494a6edc071a5b8facd4080eb02bd8342acfb2c0241fa15a8f3b27755b25c65f4ab48338111ffa1fe393a425c0ba2c13067100170698a151664c4152a8824af1cb68d98f0259494c6d0572e6fc66d0331588c876c20424ef262fb1e0691895b38e8e257f04e38322695a5695037", 0x99}, {&(0x7f0000001c40)="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", 0x124}, {&(0x7f0000000640)="f7fc370763ed7a4dbfaf549cd1dc94c047d2bfd2da573ebddcf5db435637f045346375f1b75c21a0106605fa2c283aaa0014062099dc4b58d700b3a07dbc83010c24cb730b30aee0103d81b75a4f6ce90dd0237bd4b22d66e95966a0ad75b3f8338268b29e2dd7c90b5b33722b010ce947eab220e38600b4b8e945f3b166d3d2beb7abff48ac78e8d4f591fe3e0a5d6dfa22c998d6e8d056a451f0c5cb48fb2c38a1758d378125240c6e45", 0xab}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x854) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 10:41:50 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xad, 0xa5, 0xbc, 0x8, 0x12d1, 0x142c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x2, 0x2f, 0x4, 0x1, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}, {{0x9, 0x5, 0x2, 0x12}}]}}]}}]}}, 0x0) [ 803.707020][T25234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 803.761917][T17184] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 803.782266][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 803.788542][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:41:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f00000001c0)='./file0/file0\x00') lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x2) read$FUSE(r0, 0x0, 0x0) [ 803.834634][T25236] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 10:41:50 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) [ 803.884665][T25234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:41:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f0000000040)=0x7, 0x4) sendmsg(r3, &(0x7f0000001600)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x1f4}, 0x80, 0x0}, 0x0) 10:41:51 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) 10:41:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f00000001c0)='./file0/file0\x00') lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x2) read$FUSE(r0, 0x0, 0x0) [ 804.156663][T12446] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 804.172469][T17184] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 804.181627][T17184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.192203][T17184] usb 6-1: config 0 descriptor?? [ 804.238025][T17184] pwc: Samsung MPC-C10 USB webcam detected. [ 804.342736][T14973] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 804.442182][T12360] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 804.562396][T12446] usb 1-1: Using ep0 maxpacket: 8 [ 804.631908][T14973] usb 5-1: Using ep0 maxpacket: 8 [ 804.692652][T12446] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 804.694839][T17184] pwc: recv_control_msg error -71 req 02 val 2b00 [ 804.701206][T12446] usb 1-1: config 0 has no interface number 0 [ 804.707956][T12360] usb 3-1: Using ep0 maxpacket: 8 [ 804.713860][T12446] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 804.728646][T12446] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 804.728835][T17184] pwc: recv_control_msg error -71 req 02 val 2700 [ 804.738422][T12446] usb 1-1: New USB device found, idVendor=12d1, idProduct=142c, bcdDevice= 0.00 [ 804.738465][T12446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.741281][T12446] usb 1-1: config 0 descriptor?? [ 804.752570][T12360] usb 3-1: too many configurations: 68, using maximum allowed: 8 [ 804.775664][T17184] pwc: recv_control_msg error -71 req 04 val 1700 [ 804.782214][T14973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.782321][T14973] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 804.802560][T14973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.811968][T14973] usb 5-1: config 0 descriptor?? [ 804.813342][T17184] pwc: recv_control_msg error -71 req 02 val 2c00 [ 804.824183][T12446] usb-storage 1-1:0.8: USB Mass Storage device detected [ 804.852118][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.862974][T17184] pwc: recv_control_msg error -71 req 04 val 1000 [ 804.874081][T12446] scsi host1: usb-storage 1-1:0.8 [ 804.882932][T17184] pwc: recv_control_msg error -71 req 04 val 1300 [ 804.902641][T17184] pwc: recv_control_msg error -71 req 04 val 1400 [ 804.922258][T17184] pwc: recv_control_msg error -71 req 02 val 2000 [ 804.942178][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 804.953397][T17184] pwc: recv_control_msg error -71 req 02 val 2100 [ 804.973272][T17184] pwc: recv_control_msg error -71 req 02 val 2200 [ 804.993211][T17184] pwc: recv_control_msg error -71 req 06 val 0600 [ 805.013066][T17184] pwc: recv_control_msg error -71 req 04 val 1500 [ 805.032158][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.043135][T17184] pwc: recv_control_msg error -71 req 02 val 2500 [ 805.050119][T12446] usb 1-1: USB disconnect, device number 37 [ 805.062542][T17184] pwc: recv_control_msg error -71 req 02 val 2400 [ 805.082214][T17184] pwc: recv_control_msg error -71 req 02 val 2600 [ 805.102403][T17184] pwc: recv_control_msg error -71 req 02 val 2900 [ 805.122133][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.132693][T17184] pwc: recv_control_msg error -71 req 02 val 2800 [ 805.153171][T17184] pwc: recv_control_msg error -71 req 04 val 1100 [ 805.172215][T17184] pwc: recv_control_msg error -71 req 04 val 1200 [ 805.180137][T17184] pwc: Registered as video39. [ 805.186359][T17184] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input45 [ 805.202688][T17184] usb 6-1: USB disconnect, device number 32 [ 805.214567][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.284624][T14973] elecom 0003:056E:00FF.001C: unknown main item tag 0x0 [ 805.303117][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.316439][T14973] elecom 0003:056E:00FF.001C: hidraw2: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.4-1/input0 [ 805.392179][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.482020][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.495102][T14973] usb 5-1: USB disconnect, device number 55 [ 805.652156][T12360] usb 3-1: New USB device found, idVendor=dcc9, idProduct=591e, bcdDevice= 0.40 [ 805.661400][T12360] usb 3-1: New USB device strings: Mfr=107, Product=233, SerialNumber=89 [ 805.670226][T12360] usb 3-1: Product: syz [ 805.674507][T12360] usb 3-1: Manufacturer: syz [ 805.679149][T12360] usb 3-1: SerialNumber: syz [ 805.684656][T17184] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 805.733974][T12360] usb 3-1: bad CDC descriptors [ 805.821950][T12446] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 805.936564][T12360] usb 3-1: USB disconnect, device number 26 [ 806.062001][T12446] usb 1-1: Using ep0 maxpacket: 8 [ 806.062093][T17184] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 806.076312][T17184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.085911][T17184] usb 6-1: config 0 descriptor?? [ 806.126172][T17184] pwc: Samsung MPC-C10 USB webcam detected. [ 806.182434][T12446] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 806.190512][T12446] usb 1-1: config 0 has no interface number 0 [ 806.196776][T12446] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 806.206663][T12446] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 806.216454][T12446] usb 1-1: New USB device found, idVendor=12d1, idProduct=142c, bcdDevice= 0.00 [ 806.225700][T12446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.235677][T12446] usb 1-1: config 0 descriptor?? [ 806.274045][T12446] usb-storage 1-1:0.8: USB Mass Storage device detected [ 806.302110][T14973] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 806.311667][T12446] scsi host1: usb-storage 1-1:0.8 [ 806.352071][T17184] pwc: send_video_command error -71 [ 806.357324][T17184] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 806.365117][T17184] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 806.375914][T17184] usb 6-1: USB disconnect, device number 33 10:41:53 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffec0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x2, 0x2}}], 0x30e}, 0x0) 10:41:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f00000001c0)='./file0/file0\x00') lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x2) read$FUSE(r0, 0x0, 0x0) 10:41:53 executing program 1: prlimit64(0x0, 0x7, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 806.473653][T12446] usb 1-1: USB disconnect, device number 38 [ 806.542272][T14973] usb 5-1: Using ep0 maxpacket: 8 10:41:53 executing program 1: open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)={0x80000000}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 10:41:53 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0xa3, 0x2) [ 806.686744][T14973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.697903][T14973] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 806.702084][T12360] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 806.707475][T14973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:41:53 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x141401, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x10, 0x4) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x49) [ 806.741174][T14973] usb 5-1: config 0 descriptor?? 10:41:53 executing program 0: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'nr0\x01\x00', 0x4009}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000540)='nr0\x01:\xf6.\xa3:>$?\xfa\xbf\nUM\xbf\xef\xad\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x06\xa4%\xf4\x87\x00\x00\x00\xf9\xb8\xbd#\xe2\x95\xe3\x86\xa9:#\x86\xb7\x97\x96\x1f\xc4\xdf\x0f\f\x8d\xae\x1e\x0f\xa1\x83\xae\xb4\xd6q\x93\xf5U\xcb\xe9\xb9S\xdc\x89\xf7\xf8\xdd\xa4o\xc5\xe8s6U\x16:\xc0\x9c\xb3:\xda\a\xbdG\xbfB\x02p*AiRl\xe6\xa2#\x14\xfa\xc7j\x8e\xef\x8eO\xb8\xf3X\xe2:\t\xf9\x83\x8e\x9a\xac\xd1\xc0\xda\x12\r$\xeb\xc2\xf9\'\x7f\vp\xc3N\xb3\xf1\x06eJ\xd5?C`|>\xad\xa8\x95\xa2\x15\x14\x81\x80qd\xbf\x0e\x83\xe2\xa8JZt\x9c\xd2\x93@\x1e\xa3H@\xa7\xa4\x8e\x9f\x8a\xf8\x9b\x87\x16IJpBG\x9bP\x15\x9d\xdc\x83 \xda\xaaQJ|\xf9\xa1\xd3\xd2\xcb\x19\xaasU\xad\x133\x82\x8d\x1d\x81\xec\xaf\xd6\xc9tj\xf2\\\x82\'\xc6\xf1L\xb7\x1b\xa5\xfa') 10:41:53 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x89901) [ 806.956664][T25315] M¿ï­¬xôD3A}?: renamed from nr0 [ 806.964395][T12360] usb 3-1: Using ep0 maxpacket: 8 10:41:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) 10:41:54 executing program 5: r0 = socket$inet6(0xa, 0x400000000005, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@remote}}, 0xe8) close(r1) [ 807.002379][T12360] usb 3-1: too many configurations: 68, using maximum allowed: 8 [ 807.082140][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.113638][T14973] usbhid 5-1:0.0: can't add hid device: -71 [ 807.119930][T14973] usbhid: probe of 5-1:0.0 failed with error -71 [ 807.149183][T14973] usb 5-1: USB disconnect, device number 56 [ 807.173049][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.262083][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.352077][T12360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 10:41:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 10:41:54 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000020307031dfffd946ff20c0020200a0009000100401d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 10:41:54 executing program 0: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'nr0\x01\x00', 0x4009}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000540)='nr0\x01:\xf6.\xa3:>$?\xfa\xbf\nUM\xbf\xef\xad\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x06\xa4%\xf4\x87\x00\x00\x00\xf9\xb8\xbd#\xe2\x95\xe3\x86\xa9:#\x86\xb7\x97\x96\x1f\xc4\xdf\x0f\f\x8d\xae\x1e\x0f\xa1\x83\xae\xb4\xd6q\x93\xf5U\xcb\xe9\xb9S\xdc\x89\xf7\xf8\xdd\xa4o\xc5\xe8s6U\x16:\xc0\x9c\xb3:\xda\a\xbdG\xbfB\x02p*AiRl\xe6\xa2#\x14\xfa\xc7j\x8e\xef\x8eO\xb8\xf3X\xe2:\t\xf9\x83\x8e\x9a\xac\xd1\xc0\xda\x12\r$\xeb\xc2\xf9\'\x7f\vp\xc3N\xb3\xf1\x06eJ\xd5?C`|>\xad\xa8\x95\xa2\x15\x14\x81\x80qd\xbf\x0e\x83\xe2\xa8JZt\x9c\xd2\x93@\x1e\xa3H@\xa7\xa4\x8e\x9f\x8a\xf8\x9b\x87\x16IJpBG\x9bP\x15\x9d\xdc\x83 \xda\xaaQJ|\xf9\xa1\xd3\xd2\xcb\x19\xaasU\xad\x133\x82\x8d\x1d\x81\xec\xaf\xd6\xc9tj\xf2\\\x82\'\xc6\xf1L\xb7\x1b\xa5\xfa') 10:41:54 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aa3b9808110f2020c9480000000109022400010000000009041c00029126c90009058977cc660f1f000000000009058703a422020144"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 807.503867][T12360] usb 3-1: unable to read config index 4 descriptor/all [ 807.509639][T25335] M¿ï­¬xôD3A}?: renamed from nr0 [ 807.510953][T12360] usb 3-1: can't read configurations, error -71 10:41:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) 10:41:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@remote}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) [ 807.562398][T14973] usb 5-1: new high-speed USB device number 57 using dummy_hcd 10:41:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 807.752387][T17184] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 807.781631][T25352] input: syz1 as /devices/virtual/input/input46 [ 807.816581][T14973] usb 5-1: Using ep0 maxpacket: 8 [ 807.886136][T25357] input: syz1 as /devices/virtual/input/input47 10:41:55 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x141401, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x10, 0x4) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x49) [ 807.968307][T14973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.979375][T14973] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 807.988604][T14973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.003729][T17184] usb 2-1: Using ep0 maxpacket: 8 10:41:55 executing program 0: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'nr0\x01\x00', 0x4009}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000540)='nr0\x01:\xf6.\xa3:>$?\xfa\xbf\nUM\xbf\xef\xad\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x06\xa4%\xf4\x87\x00\x00\x00\xf9\xb8\xbd#\xe2\x95\xe3\x86\xa9:#\x86\xb7\x97\x96\x1f\xc4\xdf\x0f\f\x8d\xae\x1e\x0f\xa1\x83\xae\xb4\xd6q\x93\xf5U\xcb\xe9\xb9S\xdc\x89\xf7\xf8\xdd\xa4o\xc5\xe8s6U\x16:\xc0\x9c\xb3:\xda\a\xbdG\xbfB\x02p*AiRl\xe6\xa2#\x14\xfa\xc7j\x8e\xef\x8eO\xb8\xf3X\xe2:\t\xf9\x83\x8e\x9a\xac\xd1\xc0\xda\x12\r$\xeb\xc2\xf9\'\x7f\vp\xc3N\xb3\xf1\x06eJ\xd5?C`|>\xad\xa8\x95\xa2\x15\x14\x81\x80qd\xbf\x0e\x83\xe2\xa8JZt\x9c\xd2\x93@\x1e\xa3H@\xa7\xa4\x8e\x9f\x8a\xf8\x9b\x87\x16IJpBG\x9bP\x15\x9d\xdc\x83 \xda\xaaQJ|\xf9\xa1\xd3\xd2\xcb\x19\xaasU\xad\x133\x82\x8d\x1d\x81\xec\xaf\xd6\xc9tj\xf2\\\x82\'\xc6\xf1L\xb7\x1b\xa5\xfa') 10:41:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) [ 808.064422][T14973] usb 5-1: config 0 descriptor?? [ 808.123793][T17184] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 808.124135][T25365] M¿ï­¬xôD3A}?: renamed from nr0 [ 808.132400][T17184] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.147677][T17184] usb 2-1: config 0 has no interface number 0 [ 808.153917][T17184] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 808.165196][T17184] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.178266][T17184] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 808.187461][T17184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.200915][T17184] usb 2-1: config 0 descriptor?? [ 808.248085][T17184] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 808.272127][T17184] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 808.447707][T12357] usb 2-1: USB disconnect, device number 69 [ 808.464034][T12357] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 808.554707][T14973] elecom 0003:056E:00FF.001D: unknown main item tag 0x0 [ 808.564147][T14973] elecom 0003:056E:00FF.001D: hidraw2: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.4-1/input0 [ 808.759551][T12357] usb 5-1: USB disconnect, device number 57 10:41:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) 10:41:56 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = dup2(r0, r0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x0, @loopback}, r3}}, 0x30) 10:41:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="00002b000000550000a65d59079bb100", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x759a}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0xffc99a3b00000000, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x10}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 10:41:56 executing program 0: socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'nr0\x01\x00', 0x4009}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000540)='nr0\x01:\xf6.\xa3:>$?\xfa\xbf\nUM\xbf\xef\xad\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x06\xa4%\xf4\x87\x00\x00\x00\xf9\xb8\xbd#\xe2\x95\xe3\x86\xa9:#\x86\xb7\x97\x96\x1f\xc4\xdf\x0f\f\x8d\xae\x1e\x0f\xa1\x83\xae\xb4\xd6q\x93\xf5U\xcb\xe9\xb9S\xdc\x89\xf7\xf8\xdd\xa4o\xc5\xe8s6U\x16:\xc0\x9c\xb3:\xda\a\xbdG\xbfB\x02p*AiRl\xe6\xa2#\x14\xfa\xc7j\x8e\xef\x8eO\xb8\xf3X\xe2:\t\xf9\x83\x8e\x9a\xac\xd1\xc0\xda\x12\r$\xeb\xc2\xf9\'\x7f\vp\xc3N\xb3\xf1\x06eJ\xd5?C`|>\xad\xa8\x95\xa2\x15\x14\x81\x80qd\xbf\x0e\x83\xe2\xa8JZt\x9c\xd2\x93@\x1e\xa3H@\xa7\xa4\x8e\x9f\x8a\xf8\x9b\x87\x16IJpBG\x9bP\x15\x9d\xdc\x83 \xda\xaaQJ|\xf9\xa1\xd3\xd2\xcb\x19\xaasU\xad\x133\x82\x8d\x1d\x81\xec\xaf\xd6\xc9tj\xf2\\\x82\'\xc6\xf1L\xb7\x1b\xa5\xfa') 10:41:56 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x141401, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x10, 0x4) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x49) [ 809.231829][T12360] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 809.292283][ C0] net_ratelimit: 26 callbacks suppressed [ 809.292305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 809.304548][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 809.310950][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 809.317218][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 809.323647][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 809.329874][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 809.389034][T25388] M¿ï­¬xôD3A}?: renamed from nr0 [ 809.561950][T12360] usb 2-1: Using ep0 maxpacket: 8 [ 809.671908][T17184] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 809.692293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 809.698437][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 809.704624][T12360] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 809.712796][T12360] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.723134][T12360] usb 2-1: config 0 has no interface number 0 [ 809.729313][T12360] usb 2-1: config 0 interface 28 altsetting 0 endpoint 0x89 has invalid maxpacket 1740, setting to 1024 [ 809.740574][T12360] usb 2-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.753614][T12360] usb 2-1: New USB device found, idVendor=0f11, idProduct=2020, bcdDevice=48.c9 [ 809.762787][T12360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.772942][T12360] usb 2-1: config 0 descriptor?? [ 809.825395][T12360] ldusb 2-1:0.28: Interrupt out endpoint not found (using control endpoint instead) [ 809.840715][T12360] ldusb 2-1:0.28: LD USB Device #0 now attached to major 180 minor 0 [ 809.971867][T17184] usb 5-1: Using ep0 maxpacket: 8 [ 810.012243][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 810.018284][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 810.027207][T12357] usb 2-1: USB disconnect, device number 70 [ 810.035802][T12357] ldusb 2-1:0.28: LD USB Device #0 now disconnected [ 810.102134][T17184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.113326][T17184] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 810.122511][T17184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.133080][T17184] usb 5-1: config 0 descriptor?? 10:41:57 executing program 1: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x0, 0x989680}}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc08c5334, &(0x7f0000000280)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 10:41:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 10:41:57 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x141401, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000000c0)=0x10, 0x4) creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x49) 10:41:57 executing program 0: setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xb) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb], 0x12000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="00002b000000550000a65d59079bb100", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x759a}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0xffc99a3b00000000, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x10}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 10:41:57 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) syz_emit_ethernet(0x300502, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) [ 810.589355][T25408] kvm_hv_set_msr: 115 callbacks suppressed [ 810.589392][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000008f data 0x4d00000000f [ 810.617679][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000008d data 0x4d00000000f [ 810.639969][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000008b data 0x4d00000000f [ 810.664675][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000089 data 0x4d00000000f [ 810.675450][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000087 data 0x4d00000000f [ 810.697336][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000085 data 0x4d00000000f [ 810.725700][T17184] elecom 0003:056E:00FF.001E: unknown main item tag 0x0 [ 810.738853][T17184] elecom 0003:056E:00FF.001E: hidraw2: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.4-1/input0 [ 810.747106][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007f data 0x4d00000000f [ 810.782986][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007d data 0x4d00000000f [ 810.794311][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000007b data 0x4d00000000f [ 810.806777][T25408] kvm [25403]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000079 data 0x4d00000000f [ 810.841244][T12357] usb 5-1: USB disconnect, device number 58 10:41:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000100)) ioctl$int_in(r1, 0x800060c0045005, &(0x7f0000000140)=0x40000) 10:41:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) 10:41:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="00002b000000550000a65d59079bb100", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x759a}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0xffc99a3b00000000, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x10}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 10:41:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"eaa545e7421d85382ba46bd65966a55a8a83886fd638fa602d6b7da50f67b2f7b19acfe93c195f18e5175624f1a0f90796139e737003000000e37481bf083f14d999650edb9097a2424eb05758d0290ff56fb045e448bf92657a2c3312d7778b32571bd14fb8caad0dc70d4e243038e3f69eeaf8dc766d250c4bfa8afc182d75896e0d7e694cbce34d82d8c930e299ae5f52e3647fad40732f0bb0be973e07b75ec8b1c8753e40609f918c0b892a7ec015541ad2b39be8d258973e3b73d3617c8aec4a7987b165ab65ade11ed94100e9de9d81db8612a033f60b236f48e0f3004c996d64afcca027289ef7c38efa2a8bc259eda9e45161b1fbb1dc0dda4a1c3166c2a782f5977ee8bd9d551e509f3c72687a8944ee55ad69c3c2fed0c2116d56ca160697c6369feda6e5865cc0b1d4bfe6d2681ca34903d6c57f399fb2c85a8e25fb3dc4c13bac6a7812e864f919a4358ae8ead402d6c81b955f0a4189b654d66186c36ac9ae5ca312d772942cfcfbdcf01ee1ae94f43ca82e6893aed89d05f386fb65827e27613f8b80ecfaf7d54cbb993d092428cdd31b05578bf47c78c9af37380bc512cc46d8c1bcc81f8993009b203a35e56e2eb4434a6db1229ed3a6e0476f9a3802000000000000005549716044f3554bb0e200aecfeefc0e83ce237b5cc3f3b27045faaeb2b6f7e190143240f6baa10f3d41bff09cb3d39627e1594309d60c23dd98a696d038d74317d7268c98a80000000167870598d34a09d385ec186ef848af49d312f9bc1448616092181f0f039c30da45266aeff06248d994a228db7ecd834189357a12fcb112ebebecf3ad2b960fbef92b827e51cfd9f5bf443ba730529f1ecee07984168142de2bd3d17ca50d3de1c1aeae8c15e0f44742d34f8dfcd2bbc8dc039da3aa25d6fb402f8abe3b3ad9f18ec78a8f788f0a499461f451873551b813b864c5eaf16ea9abdc87aec43d1d2e9e9691ab69d5e77fe124cc581d0183582790bab792be6e985da3f975e523a7b49175e29268d39e2d12a142dda1b59e9347805b10612b19348cbab9647b517a210d70ecf31696731c20bb6b757b661ccd166b52971027122e4736e44d35454df573354f2f96644e41c80692b2688bae0bffb8a2ef53d2b91bf2ecbc60e1cec442e5bf372c3b289ed320947bb3bc368278f48a8c797e604e647f97440000000000000008e83464dc4acabef1b949623aad99e811f3159dee90f1e6dbe1974876f10971694bf3c33e8260824bfbb35d63e51d5364c151f46c8fccf832d02120bf026b3729b44c9706ba102fc40277f51d9737bc6c1c945bf99d6fb89b4b773213758ae352d6158fc2ca928c6859f4c970cf2491004c6a1707002dbfab19b9d31adcca5ab570a393ae894a2f4e0110a7513a1982bfa900"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:41:58 executing program 3: request_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0xffffffffffffffff) add_key(&(0x7f0000000580)='encrypted\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 10:41:58 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) syz_emit_ethernet(0x300502, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 10:41:58 executing program 3: request_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0xffffffffffffffff) add_key(&(0x7f0000000580)='encrypted\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 10:41:58 executing program 0: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0) [ 811.873632][T17184] usb 5-1: new high-speed USB device number 59 using dummy_hcd 10:41:59 executing program 1: r0 = socket$inet6(0xa, 0x800000003, 0xff) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)="3f6b9c7bb156507048284dc93fc1c2ddadb65d197997c114536b4a384a0b9bbe51721b99ca74bded", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x18, 0x29, 0x4, 'V'}], 0x18}}], 0x2, 0x0) 10:41:59 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc6, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10:41:59 executing program 3: request_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0xffffffffffffffff) add_key(&(0x7f0000000580)='encrypted\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 10:41:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000002040), &(0x7f0000003280)=0x8) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 10:41:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="00002b000000550000a65d59079bb100", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x759a}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0xffc99a3b00000000, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x10}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 812.252543][T17184] usb 5-1: Using ep0 maxpacket: 8 [ 812.352350][T14973] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 812.420904][T17184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.432025][T17184] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 812.441203][T17184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.560852][T17184] usb 5-1: config 0 descriptor?? [ 812.672021][T14973] usb 1-1: Using ep0 maxpacket: 8 [ 812.822128][T14973] usb 1-1: config 0 has an invalid interface number: 198 but max is 0 [ 812.830444][T14973] usb 1-1: config 0 has no interface number 0 [ 812.836716][T14973] usb 1-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 812.846770][T14973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.856572][T14973] usb 1-1: config 0 descriptor?? [ 812.906562][T14973] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 813.044496][T17184] elecom 0003:056E:00FF.001F: unknown main item tag 0x0 [ 813.062588][T17184] elecom 0003:056E:00FF.001F: hidraw2: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.4-1/input0 [ 813.259507][T12357] usb 5-1: USB disconnect, device number 59 10:42:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0/bus\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0/bus\x00', 0x0, 0x1000, 0x0) mount(&(0x7f0000000240), &(0x7f0000000140)='.', 0x0, 0x3002480, 0x0) 10:42:00 executing program 3: request_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0xffffffffffffffff) add_key(&(0x7f0000000580)='encrypted\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 10:42:00 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) syz_emit_ethernet(0x300502, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) 10:42:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="1104000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000e00ffffffff0000000008000100736662002c00020028000100000000000000002000"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x10, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) 10:42:01 executing program 1: syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="120100021b000100b9eccdc93781f04a9f000000000584a353"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x10, 0x0, 0x1}, 0x139}}, 0x18) 10:42:01 executing program 4: socket(0x10, 0x80002, 0x0) r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f00000004c0)) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x300, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000000c0)={0x5, 0x3, 0x3}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) fsetxattr$system_posix_acl(r1, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffff8) fstat(0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, r2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 10:42:01 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_hci(r0, 0x65, 0x4, &(0x7f0000cbc000)=""/244, &(0x7f0000004a40)=0xf4) 10:42:01 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x60ffffffffff, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f00000001c0)="100000400310000040", 0x9}]) [ 814.022564][T14973] gspca_sonixj: reg_w1 err -32 [ 814.051993][T14973] ===================================================== [ 814.058998][T14973] BUG: KMSAN: uninit-value in gspca_dev_probe2+0xe93/0x2230 [ 814.066294][T14973] CPU: 0 PID: 14973 Comm: kworker/0:8 Not tainted 5.3.0-rc7+ #0 [ 814.073928][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.084004][T14973] Workqueue: usb_hub_wq hub_event [ 814.089031][T14973] Call Trace: [ 814.092440][T14973] dump_stack+0x191/0x1f0 [ 814.096784][T14973] kmsan_report+0x17d/0x2f0 [ 814.101310][T14973] __msan_warning+0x73/0xe0 [ 814.105830][T14973] sd_init+0x1788/0x8480 [ 814.110097][T14973] ? sd_config+0x4d0/0x4d0 [ 814.114521][T14973] gspca_dev_probe2+0xe93/0x2230 [ 814.119492][T14973] gspca_dev_probe+0x346/0x3b0 [ 814.124280][T14973] sd_probe+0x8d/0xa0 [ 814.128266][T14973] ? i2c_w+0x940/0x940 [ 814.132343][T14973] usb_probe_interface+0xd19/0x1310 [ 814.137554][T14973] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 814.143460][T14973] ? usb_register_driver+0x7d0/0x7d0 [ 814.148760][T14973] really_probe+0x1373/0x1dc0 [ 814.153459][T14973] driver_probe_device+0x1ba/0x510 [ 814.158596][T14973] __device_attach_driver+0x5b8/0x790 [ 814.163997][T14973] bus_for_each_drv+0x28e/0x3b0 [ 814.168900][T14973] ? deferred_probe_work_func+0x400/0x400 [ 814.174643][T14973] __device_attach+0x489/0x750 [ 814.179426][T14973] device_initial_probe+0x4a/0x60 [ 814.184460][T14973] bus_probe_device+0x131/0x390 [ 814.189323][T14973] device_add+0x25b5/0x2df0 [ 814.193859][T14973] usb_set_configuration+0x309f/0x3710 [ 814.199360][T14973] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 814.205459][T14973] generic_probe+0xe7/0x280 [ 814.210850][T14973] ? usb_choose_configuration+0xae0/0xae0 [ 814.216589][T14973] usb_probe_device+0x146/0x200 [ 814.221456][T14973] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 814.227360][T14973] ? usb_register_device_driver+0x470/0x470 [ 814.233273][T14973] really_probe+0x1373/0x1dc0 [ 814.237982][T14973] driver_probe_device+0x1ba/0x510 [ 814.243130][T14973] __device_attach_driver+0x5b8/0x790 [ 814.248520][T14973] bus_for_each_drv+0x28e/0x3b0 [ 814.253372][T14973] ? deferred_probe_work_func+0x400/0x400 [ 814.259114][T14973] __device_attach+0x489/0x750 [ 814.263902][T14973] device_initial_probe+0x4a/0x60 [ 814.268939][T14973] bus_probe_device+0x131/0x390 [ 814.273811][T14973] device_add+0x25b5/0x2df0 [ 814.278356][T14973] usb_new_device+0x23e5/0x2fb0 [ 814.283251][T14973] hub_event+0x581d/0x72f0 [ 814.287727][T14973] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 814.293627][T14973] ? led_work+0x720/0x720 [ 814.297963][T14973] ? led_work+0x720/0x720 [ 814.302317][T14973] process_one_work+0x1572/0x1ef0 [ 814.307385][T14973] worker_thread+0x111b/0x2460 [ 814.312181][T14973] kthread+0x4b5/0x4f0 [ 814.316256][T14973] ? process_one_work+0x1ef0/0x1ef0 [ 814.321466][T14973] ? kthread_blkcg+0xf0/0xf0 [ 814.326063][T14973] ret_from_fork+0x35/0x40 [ 814.330488][T14973] [ 814.332813][T14973] Uninit was created at: [ 814.337065][T14973] kmsan_internal_poison_shadow+0x60/0x120 [ 814.342883][T14973] kmsan_slab_alloc+0xaa/0x120 [ 814.347649][T14973] kmem_cache_alloc_trace+0x8c5/0xd20 [ 814.353024][T14973] gspca_dev_probe2+0x30d/0x2230 [ 814.357963][T14973] gspca_dev_probe+0x346/0x3b0 [ 814.362733][T14973] sd_probe+0x8d/0xa0 [ 814.366723][T14973] usb_probe_interface+0xd19/0x1310 [ 814.371927][T14973] really_probe+0x1373/0x1dc0 [ 814.376605][T14973] driver_probe_device+0x1ba/0x510 [ 814.381714][T14973] __device_attach_driver+0x5b8/0x790 [ 814.387084][T14973] bus_for_each_drv+0x28e/0x3b0 [ 814.391934][T14973] __device_attach+0x489/0x750 [ 814.396704][T14973] device_initial_probe+0x4a/0x60 [ 814.401733][T14973] bus_probe_device+0x131/0x390 [ 814.406582][T14973] device_add+0x25b5/0x2df0 [ 814.411086][T14973] usb_set_configuration+0x309f/0x3710 [ 814.416544][T14973] generic_probe+0xe7/0x280 [ 814.421046][T14973] usb_probe_device+0x146/0x200 [ 814.425906][T14973] really_probe+0x1373/0x1dc0 [ 814.430585][T14973] driver_probe_device+0x1ba/0x510 [ 814.435710][T14973] __device_attach_driver+0x5b8/0x790 [ 814.441080][T14973] bus_for_each_drv+0x28e/0x3b0 [ 814.445930][T14973] __device_attach+0x489/0x750 [ 814.450700][T14973] device_initial_probe+0x4a/0x60 [ 814.455735][T14973] bus_probe_device+0x131/0x390 [ 814.460598][T14973] device_add+0x25b5/0x2df0 [ 814.465113][T14973] usb_new_device+0x23e5/0x2fb0 [ 814.469974][T14973] hub_event+0x581d/0x72f0 [ 814.474397][T14973] process_one_work+0x1572/0x1ef0 [ 814.479430][T14973] worker_thread+0x111b/0x2460 [ 814.484197][T14973] kthread+0x4b5/0x4f0 [ 814.488275][T14973] ret_from_fork+0x35/0x40 [ 814.492683][T14973] ===================================================== [ 814.499612][T14973] Disabling lock debugging due to kernel taint [ 814.505762][T14973] Kernel panic - not syncing: panic_on_warn set ... [ 814.512359][T14973] CPU: 0 PID: 14973 Comm: kworker/0:8 Tainted: G B 5.3.0-rc7+ #0 [ 814.521373][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.531461][T14973] Workqueue: usb_hub_wq hub_event [ 814.536484][T14973] Call Trace: [ 814.539793][T14973] dump_stack+0x191/0x1f0 [ 814.544141][T14973] panic+0x3c9/0xc1e [ 814.548073][T14973] kmsan_report+0x2e5/0x2f0 [ 814.552588][T14973] __msan_warning+0x73/0xe0 [ 814.557105][T14973] sd_init+0x1788/0x8480 [ 814.561371][T14973] ? sd_config+0x4d0/0x4d0 [ 814.565795][T14973] gspca_dev_probe2+0xe93/0x2230 [ 814.570765][T14973] gspca_dev_probe+0x346/0x3b0 [ 814.576073][T14973] sd_probe+0x8d/0xa0 [ 814.580064][T14973] ? i2c_w+0x940/0x940 [ 814.584147][T14973] usb_probe_interface+0xd19/0x1310 [ 814.589367][T14973] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 814.595281][T14973] ? usb_register_driver+0x7d0/0x7d0 [ 814.600581][T14973] really_probe+0x1373/0x1dc0 [ 814.605292][T14973] driver_probe_device+0x1ba/0x510 [ 814.610433][T14973] __device_attach_driver+0x5b8/0x790 [ 814.615836][T14973] bus_for_each_drv+0x28e/0x3b0 [ 814.620711][T14973] ? deferred_probe_work_func+0x400/0x400 [ 814.626455][T14973] __device_attach+0x489/0x750 [ 814.631246][T14973] device_initial_probe+0x4a/0x60 [ 814.636294][T14973] bus_probe_device+0x131/0x390 [ 814.641168][T14973] device_add+0x25b5/0x2df0 [ 814.645713][T14973] usb_set_configuration+0x309f/0x3710 [ 814.651209][T14973] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 814.657311][T14973] generic_probe+0xe7/0x280 [ 814.661827][T14973] ? usb_choose_configuration+0xae0/0xae0 [ 814.667561][T14973] usb_probe_device+0x146/0x200 [ 814.672424][T14973] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 814.678337][T14973] ? usb_register_device_driver+0x470/0x470 [ 814.684249][T14973] really_probe+0x1373/0x1dc0 [ 814.688954][T14973] driver_probe_device+0x1ba/0x510 [ 814.694092][T14973] __device_attach_driver+0x5b8/0x790 [ 814.699491][T14973] bus_for_each_drv+0x28e/0x3b0 [ 814.704354][T14973] ? deferred_probe_work_func+0x400/0x400 [ 814.710100][T14973] __device_attach+0x489/0x750 [ 814.714895][T14973] device_initial_probe+0x4a/0x60 [ 814.719934][T14973] bus_probe_device+0x131/0x390 [ 814.724805][T14973] device_add+0x25b5/0x2df0 [ 814.729346][T14973] usb_new_device+0x23e5/0x2fb0 [ 814.734232][T14973] hub_event+0x581d/0x72f0 [ 814.738713][T14973] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 814.744616][T14973] ? led_work+0x720/0x720 [ 814.748954][T14973] ? led_work+0x720/0x720 [ 814.753299][T14973] process_one_work+0x1572/0x1ef0 [ 814.758357][T14973] worker_thread+0x111b/0x2460 [ 814.763157][T14973] kthread+0x4b5/0x4f0 [ 814.767234][T14973] ? process_one_work+0x1ef0/0x1ef0 [ 814.772443][T14973] ? kthread_blkcg+0xf0/0xf0 [ 814.777045][T14973] ret_from_fork+0x35/0x40 [ 814.782833][T14973] Kernel Offset: disabled [ 814.787153][T14973] Rebooting in 86400 seconds..