= socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x5, 0x4) mmap$IORING_OFF_SQES(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x1, 0x31, 0xffffffffffffffff, 0x10000000) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000d12ffc)) 20:56:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newaddr={0x54, 0x14, 0x825, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x9}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14}]}, 0x54}}, 0x0) 20:56:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa5) 20:56:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) 20:56:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) prctl$PR_GET_SECUREBITS(0x1b) getsockopt$inet6_opts(r1, 0x29, 0x100000000037, 0x0, &(0x7f0000000140)=0xffffffffffffff7d) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x5}}, 0xffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x141401, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 20:56:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003980)='/dev/uinput\x00', 0x0, 0x0) unshare(0x8000400) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1a) [ 428.746764][T14475] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 428.755025][T14475] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 20:56:01 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x2000c0884113, 0x0) [ 428.808328][T14483] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 428.816707][T14483] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 20:56:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x5, 0x4) mmap$IORING_OFF_SQES(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x1, 0x31, 0xffffffffffffffff, 0x10000000) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000d12ffc)) 20:56:01 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) unshare(0x24060400) close(r0) pread64(r0, 0x0, 0x0, 0x0) 20:56:02 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = dup2(r0, r1) fgetxattr(r2, &(0x7f0000000040)=@random={'user.', '\x00'}, 0x0, 0x0) 20:56:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x201ff000}], 0x1, 0x0) 20:56:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000000)=0x2000000, 0x4) 20:56:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x5, 0x4) mmap$IORING_OFF_SQES(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x1, 0x31, 0xffffffffffffffff, 0x10000000) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000d12ffc)) 20:56:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @empty=[0x2]}]}, 0x40}}, 0x0) 20:56:02 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f8eff3)='/dev/snd/seq\x00', 0x0, 0x20401) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xe}) write$sndseq(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x3ffffd}) 20:56:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x5, 0x4) mmap$IORING_OFF_SQES(&(0x7f00009fe000/0x600000)=nil, 0x600000, 0x1, 0x31, 0xffffffffffffffff, 0x10000000) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000d12ffc)) 20:56:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000000)=0x2000000, 0x4) 20:56:02 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x200000, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 20:56:02 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet_buf(r1, 0x0, 0x22, &(0x7f0000008000), &(0x7f0000000080)=0x2e5) 20:56:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) prctl$PR_GET_SECUREBITS(0x1b) getsockopt$inet6_opts(r1, 0x29, 0x100000000037, 0x0, &(0x7f0000000140)=0xffffffffffffff7d) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x5}}, 0xffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x141401, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 20:56:02 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) write$FUSE_DIRENT(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x40) utime(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) 20:56:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000000)=0x2000000, 0x4) 20:56:03 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 20:56:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) prctl$PR_GET_SECUREBITS(0x1b) getsockopt$inet6_opts(r1, 0x29, 0x100000000037, 0x0, &(0x7f0000000140)=0xffffffffffffff7d) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x5}}, 0xffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x141401, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 20:56:03 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') ioctl$FS_IOC_GETFLAGS(r0, 0xb701, 0x0) 20:56:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000000)=0x2000000, 0x4) 20:56:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4000009c}]}) 20:56:03 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 20:56:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) prctl$PR_GET_SECUREBITS(0x1b) getsockopt$inet6_opts(r1, 0x29, 0x100000000037, 0x0, &(0x7f0000000140)=0xffffffffffffff7d) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x5}}, 0xffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x141401, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 20:56:03 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000007440)={0x0, 0x0, &(0x7f00000073c0)=[{0x0}, {0x0}, {&(0x7f0000007080)=""/186, 0xba}], 0x3}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b1a3fd800000000a3", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x11, &(0x7f0000000380)=[{&(0x7f0000000200)=""/95, 0x5c8}, {&(0x7f00000000c0)=""/85, 0x2f}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x400000000000334, 0x6, &(0x7f0000003700)={0x77359400}) 20:56:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff49, 0x0, 0x0, 0xfffffee8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x89b3e53efb245d9c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 20:56:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x2, 0x9d, 0x0, 0x0, 0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) prctl$PR_GET_SECUREBITS(0x1b) getsockopt$inet6_opts(r1, 0x29, 0x100000000037, 0x0, &(0x7f0000000140)=0xffffffffffffff7d) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x5}}, 0xffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x141401, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 20:56:04 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = gettid() sigaltstack(&(0x7f00002dc000/0x1000)=nil, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x2, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x73, 0x0) 20:56:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 20:56:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x7, 0x3, 0x2000cf99, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 20:56:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) prctl$PR_GET_SECUREBITS(0x1b) getsockopt$inet6_opts(r1, 0x29, 0x100000000037, 0x0, &(0x7f0000000140)=0xffffffffffffff7d) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x5}}, 0xffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x141401, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 20:56:04 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="fc0000001c00071bab0925000900070002ab08000700000081001e93210001c000000000000000000c00000000039815fa2c1ec28656aaa79bb94b46fe0000000a000200035a02036c6c256f1a272fdf0d11512f3cadd44000000000008934d05cd3f3187a617cd5000000000000002c05defd5a32e2ab8207000000ec18444ef92e475ef8b29d3ef3d9a48a170e5bba4a463ae4f5566f91cf190201ded815b2ccd243fa95ed94e0ad91bd0734babc7c6d27392ad23f2ecb57d47689cd3dd16b17e583df150c3b880f411f46a60467b4d57155870271773a580a75e63ecaa10000c880ac801f03000000000000000548deac270e33429fd311000000", 0xfc) 20:56:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x4018) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000480)='{{nodev\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:56:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x100000001, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000000)={0x40f0effd, 0x0, "225a4374327cada684f6caa230f674e75e201c0100"}) [ 431.897408][T14605] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 20:56:05 executing program 2: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x0, &(0x7f0000d14ffc)="02f9ffff", 0x4) 20:56:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) 20:56:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1) prctl$PR_GET_SECUREBITS(0x1b) getsockopt$inet6_opts(r1, 0x29, 0x100000000037, 0x0, &(0x7f0000000140)=0xffffffffffffff7d) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x0, @empty, 0x5}}, 0xffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x141401, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 20:56:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000500)=0x2111) 20:56:05 executing program 4: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) close(r0) r1 = socket(0x20000000000000a, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="a504", 0x2) 20:56:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "f0f3c23db58cbd48", "4a80970c81539622b93494f5266177be2f653d878723c5509f129ac6b5d7f2a9", "43d5f174", "ef770a7deeb0ad10"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:56:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x2, {0x7, 0x1f, 0x0, 0x2000050}}, 0x50) 20:56:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x21000000, &(0x7f0000ffe000/0x2000)=nil}) 20:56:05 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)=0x8000) write$cgroup_int(r0, &(0x7f0000000080), 0x12) close(r0) 20:56:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@ipv6_newrule={0x34, 0x1e, 0x80d, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nr0\x00'}]}, 0x34}}, 0x0) 20:56:05 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) unshare(0x24020400) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 20:56:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "613fb28139c3c126103cfc69203ef1c97625453733d4799d6f1b532497150f86", 0x30383653}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f}}) 20:56:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="1f000000190081ace4051cecff091ffa1c1499a61cfe7084bce26a23480b0e", 0x1f}], 0x1}, 0x0) [ 433.075700][T14660] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 20:56:06 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003400), 0x340020}], 0x1}}], 0x1, 0x0) 20:56:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x35, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xe9, 0x23, 0x1, 0x8, 0x1a0a, 0x103, 0x437d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5e, 0x0, 0x1, 0xd1, 0xc0, 0xbe, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "34fae9a2e0b5"}]}}]}}]}}]}}, 0x0) 20:56:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001800130100000000000000008020000000040005000400000c001600080034000400000008000b0002000000100009000800000208000500ac1414bbff3ee4ec06ea564c76a7f3e4db4d487cbdc306122eafb5ebae69584a48b3331d5dfee43d2869c6f78f3c2eeee38bb8d5953fe51dd0fb90d3ab25413275958f37f958dda9fb72687baa5bb9314e7de6a31913c671a6bfbf3b7878954c699f12dc63ae9b76fcb58f4b4de5c389295a23e5b7e5dba2325340749051f5410c7403e87a81de7fdb4851aae3382efa26e46077a9425c99e02553bd79f3bc0064ad99b42d9a111ec49a63cd4d5d8e2f2d6d650108550af1025dc69760fac3ffbce6ca00b9a857bc65ad41b6b0549ce611"], 0x40}}, 0x0) 20:56:06 executing program 4: r0 = socket(0x10, 0x802, 0x0) sendmmsg(r0, &(0x7f00000072c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001380)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000002600)=[{0x10}], 0x10}}], 0x2, 0x0) 20:56:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x0, @multicast1}}, {0x20, 0x2, @in6={0x2, 0x0, 0x0, @initdev}}}}]}]}, 0x60}}, 0x0) 20:56:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x60, 0x0, 0x0, 0xffffffffffffffe1}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 20:56:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "613fb28139c3c126103cfc69203ef1c97625453733d4799d6f1b532497150f86", 0x30383653}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:06 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e1fc220861249203485000000010902120001000000000904f942a9550c9d58518d3098a05f065e3f0000ed961200"], 0x0) 20:56:06 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf3, 0x5b, 0x88, 0x8, 0x846, 0x9030, 0x4c72, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x4b, 0x0, 0x0, 0xa4, 0x5d, 0x74}}]}}]}}, 0x0) 20:56:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "613fb28139c3c126103cfc69203ef1c97625453733d4799d6f1b532497150f86", 0x30383653}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:06 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='bridge_slave_1\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19403, 0x0) [ 433.677620][ T2915] usb 4-1: new high-speed USB device number 16 using dummy_hcd 20:56:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="24000000210007041dfffd946f610500020000000000000000000800050016000400ff7e", 0x24}], 0x1}, 0x0) 20:56:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x0, "613fb28139c3c126103cfc69203ef1c97625453733d4799d6f1b532497150f86", 0x30383653}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 433.837499][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 433.927219][ T2915] usb 4-1: Using ep0 maxpacket: 8 [ 433.952039][ T12] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 434.049971][ T2915] usb 4-1: config 0 has an invalid interface number: 94 but max is 0 [ 434.058397][ T2915] usb 4-1: config 0 has no interface number 0 [ 434.064621][ T2915] usb 4-1: config 0 interface 94 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 434.109578][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 434.197013][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 434.227342][ T2915] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.7d [ 434.236702][ T2915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.245054][ T2915] usb 4-1: Product: syz [ 434.247118][ T30] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 434.249382][ T2915] usb 4-1: Manufacturer: syz [ 434.257576][ T30] usb 5-1: config 0 has no interface number 0 [ 434.257666][ T30] usb 5-1: too many endpoints for config 0 interface 249 altsetting 66: 169, using maximum allowed: 30 [ 434.262250][ T2915] usb 4-1: SerialNumber: syz [ 434.268414][ T30] usb 5-1: config 0 interface 249 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 169 [ 434.286178][ T2915] usb 4-1: config 0 descriptor?? [ 434.297459][ T30] usb 5-1: config 0 interface 249 has no altsetting 0 [ 434.297562][ T30] usb 5-1: New USB device found, idVendor=1286, idProduct=2049, bcdDevice=85.34 [ 434.297625][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.318468][ T30] usb 5-1: config 0 descriptor?? [ 434.377236][ T12] usb 1-1: config 0 has an invalid interface number: 75 but max is 0 [ 434.385480][ T12] usb 1-1: config 0 has no interface number 0 [ 434.391933][ T12] usb 1-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice=4c.72 [ 434.401467][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.413004][ T12] usb 1-1: config 0 descriptor?? [ 434.560025][ T2915] usb 4-1: USB disconnect, device number 16 [ 434.607537][ T30] usb 5-1: string descriptor 0 read error: -71 [ 434.640373][ T4896] usb 5-1: Direct firmware load for mrvl/usb8801_uapsta.bin failed with error -2 [ 434.649827][ T4896] usb 5-1: Failed to get firmware mrvl/usb8801_uapsta.bin [ 434.657430][ T4896] usb 5-1: info: _mwifiex_fw_dpc: unregister device [ 434.667479][ T30] usb 5-1: USB disconnect, device number 12 [ 434.697488][ T12] usb 1-1: string descriptor 0 read error: -71 [ 434.704885][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 434.716035][T11541] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 434.726106][T11541] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 434.734403][ T12] usb 1-1: USB disconnect, device number 27 [ 434.741551][T11541] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 434.749861][T11541] usb 1-1: no suitable firmware found! [ 434.755370][T11541] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 434.762697][ T12] usb 1-1: ath9k_htc: USB layer deinitialized [ 435.336992][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 435.347021][ T12] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 435.437023][T11541] usb 1-1: new high-speed USB device number 28 using dummy_hcd 20:56:08 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', &(0x7f0000000140)) sendfile(r0, r0, 0x0, 0x40fdf) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x41, 0x0) pwritev(r3, &(0x7f0000001340), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x1, 0x2000) 20:56:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x8, 0x1ff}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x8, 0xe75}) 20:56:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') sendfile(r0, r0, 0x0, 0x100) sendfile(r0, r0, &(0x7f0000000140), 0x800000002) 20:56:08 executing program 5: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x21, 0x59) connect(r0, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 435.577603][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 435.597100][ T12] usb 4-1: Using ep0 maxpacket: 8 [ 435.667669][ T12] usb 4-1: device descriptor read/all, error -71 [ 435.697404][T11541] usb 1-1: Using ep0 maxpacket: 8 [ 435.713094][ T30] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 435.721674][ T30] usb 5-1: config 0 has no interface number 0 [ 435.728250][ T30] usb 5-1: too many endpoints for config 0 interface 249 altsetting 66: 169, using maximum allowed: 30 [ 435.739503][ T30] usb 5-1: config 0 interface 249 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 169 [ 435.753038][ T30] usb 5-1: config 0 interface 249 has no altsetting 0 20:56:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5175e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1e, 0x1000002ff, 0x0, 0x0, {0xffffff01}}, 0x14}}, 0x0) 20:56:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200140002000000400000000001000005000600200000000a00000000000000000500e50000070000001f00000000000003000000000000020001008000000000000002000000000500050000009f000a0000ff17000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x32f0460fe8298b6, 0x0) [ 435.760033][ T30] usb 5-1: New USB device found, idVendor=1286, idProduct=2049, bcdDevice=85.34 [ 435.769258][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.805096][ T30] usb 5-1: config 0 descriptor?? [ 435.847199][T11541] usb 1-1: config 0 has an invalid interface number: 75 but max is 0 [ 435.855490][T11541] usb 1-1: config 0 has no interface number 0 [ 435.862385][T11541] usb 1-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice=4c.72 [ 435.871589][T11541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.989736][T11541] usb 1-1: config 0 descriptor?? [ 436.087564][ T30] usb 5-1: string descriptor 0 read error: -71 [ 436.151611][ T4896] usb 5-1: Direct firmware load for mrvl/usb8801_uapsta.bin failed with error -2 [ 436.161126][ T4896] usb 5-1: Failed to get firmware mrvl/usb8801_uapsta.bin [ 436.168495][ T4896] usb 5-1: info: _mwifiex_fw_dpc: unregister device [ 436.178450][ T30] usb 5-1: USB disconnect, device number 13 [ 436.257046][T11541] usb 1-1: string descriptor 0 read error: -71 [ 436.264654][T11541] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 436.308474][ T2915] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 436.318409][ T2915] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 436.327510][T11541] usb 1-1: USB disconnect, device number 28 [ 436.356281][ T2915] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 436.364624][ T2915] usb 1-1: no suitable firmware found! [ 436.373695][ T2915] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 436.381092][T11541] usb 1-1: ath9k_htc: USB layer deinitialized 20:56:09 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0) mount$fuse(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x40025, 0x0) 20:56:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @pic={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:09 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 20:56:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 20:56:09 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, '\x00\x00\x10\x00\x00\x00\x00\x1a\xf9D\xbc\x00'}, 0x18) 20:56:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', &(0x7f0000000140)) sendfile(r0, r0, 0x0, 0x40fdf) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x41, 0x0) pwritev(r3, &(0x7f0000001340), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x1, 0x2000) 20:56:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@loopback, @in6=@dev}, {@in6=@empty, 0x0, 0x2b}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'ghash-ce\x00'}}}]}, 0x138}}, 0x0) [ 436.764296][T14769] input: syz0 as /devices/virtual/input/input20 [ 436.829368][T14765] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.852959][T14776] input: syz0 as /devices/virtual/input/input21 20:56:10 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1e, 0x0, &(0x7f0000000040)) 20:56:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) unshare(0x400) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 20:56:10 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00\x80\n\x0f\xa0\'\x87\x9e\xee\xde.$^\x19\x15\xb8.\x19\x1c\xae\xf6\xbf\x9c\xda~\xf7\xb4lE\x82j\x00\x88\xfb_\xab\xf8\x9c\x1f\xc59\xd4\xb5\xd9\x19', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x2) unshare(0x20400) 20:56:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x141, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000000c0)=0x80000000, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0xfffffffffffffe33}, 0x2000) 20:56:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x10000000000020, 0x0, 0x0, 0xffff7ffffffff02c}, {0x6}]}, 0x10) [ 437.189393][T14789] Unknown ioctl 1075883590 20:56:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "67d2e946ffc0c773", "4a8c34393ac6b36cf1974b0e026970eaa174210a4bd97cbbf195ec519d61624e", "2f78f5a4", "13139c4b52aea25b"}, 0x38) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@dontfrag={{0x14}}], 0x28}, 0x0) [ 437.228763][T14789] Unknown ioctl 1075883590 [ 437.233518][T14789] Unknown ioctl 1075883590 [ 437.243750][T14789] Unknown ioctl 1075883590 [ 437.273132][T14789] Unknown ioctl 1075883590 [ 437.286495][T14789] Unknown ioctl 1075883590 20:56:10 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', &(0x7f0000000140)) sendfile(r0, r0, 0x0, 0x40fdf) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x41, 0x0) pwritev(r3, &(0x7f0000001340), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x1, 0x2000) [ 437.342899][T14789] Unknown ioctl 1075883590 [ 437.364331][T14789] Unknown ioctl 1075883590 [ 437.401069][T14789] Unknown ioctl 1075883590 [ 437.433190][T14789] Unknown ioctl 1075883590 [ 437.468491][T14789] Unknown ioctl 1075883590 20:56:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000500)="a4c87a2bbff7b94efc08ab12f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb554d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e79bb42eeee8a0df724d9fdc5090088e5fe4c7c6ef0b6cff45a2320b2b44ad18c8a97430df5ad0856d0e97d5911c707ef3e3c09ea654ed13e9defea72e230f0fa9aa793d930a0979b43b652bfd4c9c460ab5479129e80407dabf46f6ced6a6931ecc5c569d54a1899bc9f", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 20:56:10 executing program 1: capset(&(0x7f0000000100)={0x20080522}, &(0x7f00000001c0)) pivot_root(0x0, 0x0) [ 437.521846][T14789] Unknown ioctl 1075883590 20:56:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000100)='eth0\x00') mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) close(r2) [ 437.551089][T14789] Unknown ioctl 1075883590 [ 437.569316][T14789] Unknown ioctl 1075883590 [ 437.615502][T14789] Unknown ioctl 1075883590 [ 437.640507][T14789] Unknown ioctl 1075883590 [ 437.656712][T14789] Unknown ioctl 1075883590 20:56:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 437.673632][T14789] Unknown ioctl 1075883590 [ 437.691681][T14789] Unknown ioctl 1075883590 [ 437.714874][T14789] Unknown ioctl 1075883590 [ 437.730965][T14789] Unknown ioctl 1075883590 [ 437.746246][T14789] Unknown ioctl 1075883590 20:56:10 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={r0, 0x3, 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x20) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r2, 0x7, 0x1, 0x5, &(0x7f0000000140)=[0x0], 0x1}, 0x20) r3 = openat$cgroup_int(r2, &(0x7f0000000800)='pids.max\x00\x16O\x81\x97\a\xf6\x00\xae\xc0\xce\x8f\x80he\xa4\x19\xe0\x98\x1d\x8e3\xb8\x1e\xeb\xe3?\xc2\xab\xc5H%A\x90\xba\xb2+\xf1\x979\xefB \x12\n\xef.\xc5}\'8\xaed\x9e\x028 \x17\xaaI\xfe\xd4\xc4\x89U\xee\xa8\x7f\x92\x05\x9b\xe2\xb5\xa3\x9fb.\xe1\bU\\\t\x01f{\x9b\xd6\x92\x13\xd2tU5\xd6\x867\xec\x03T\xa2\xeb\xb0\xe2\xf9\xcb\xc2\\+\x83\x89\x90\xbb\"7\x91j\xdd(W\xdd\x8a\xb3\xfeL8\xa5\x025\xf9\x8e\x0eE82yT', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x3, 0x4, 0x8, &(0x7f00000004c0)) write$cgroup_int(r3, &(0x7f0000000280)=0x6a, 0x12) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000640)={0x0, 0x70, 0xe6a7, 0x6, 0x5, 0x7, 0x0, 0xd3d, 0x88800, 0x2, 0x8, 0x7, 0x8dd, 0x8, 0x2, 0xfe8, 0xeaeb, 0x5, 0x4, 0x3, 0x20, 0x0, 0x1f2, 0x4, 0xa9, 0x7ff, 0x3, 0x6, 0x1f, 0x80000001, 0x3ff, 0x6, 0x6, 0x0, 0x4f, 0x8, 0xffffffffffff8000, 0x9, 0x0, 0x7, 0x5, @perf_config_ext={0xffff, 0x5}, 0x2000, 0x6, 0x5da6, 0x7, 0x9, 0x7, 0x7}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() [ 437.761477][T14789] Unknown ioctl 1075883590 [ 437.814700][T14789] Unknown ioctl 1075883590 20:56:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa) [ 437.839606][T14789] Unknown ioctl 1075883590 20:56:11 executing program 2: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x391}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\n\xea:\x01\x00\x00\x03', @ifru_flags=0x14}) 20:56:11 executing program 5: fchmodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 20:56:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000180)=r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00', &(0x7f0000000140)) sendfile(r0, r0, 0x0, 0x40fdf) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x41, 0x0) pwritev(r3, &(0x7f0000001340), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x1, 0x2000) 20:56:11 executing program 0: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00\x00\x00\x00\x00P\xe0\x00', 0x7ffffffff002, 0x0, 0x90, [0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) 20:56:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xff0f, 0x72, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x80045439, &(0x7f0000000080)) 20:56:11 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, 0x10) 20:56:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4004ae99, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r5, r4) 20:56:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000404000000000"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x2aa, 0x20, &(0x7f0000001000)={0x77359400}) 20:56:13 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000e08000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000735000/0x1000)=nil) madvise(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0xf) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x3, &(0x7f0000c28000)=0x800003f, 0xf0, 0x0) 20:56:13 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) 20:56:13 executing program 1: syz_usb_connect(0x0, 0x30c, &(0x7f0000003840)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 20:56:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x40096101, &(0x7f0000000040)) [ 440.711690][T14876] QAT: Stopping all acceleration devices. [ 440.729108][T14881] QAT: Stopping all acceleration devices. 20:56:13 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [{}]}]}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 20:56:13 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2}) 20:56:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x10000002) write$evdev(r0, &(0x7f0000000140)=[{}, {}], 0xcfa6c813) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x80044501, 0x0) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 20:56:13 executing program 5: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x9e5296c78c519127, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) [ 440.934395][ T30] usb 2-1: new high-speed USB device number 12 using dummy_hcd 20:56:14 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000380)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x3, 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000180)=[{0xffffff81, 0x4, 0x0, 0x0, @time={0x77359400}}], 0x30) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x8}, 0x18) shutdown(r0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x10001, 0x8, 0x9ae1, 0xc96e]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x14}]}, &(0x7f0000000080)=0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}}, 0x98) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup(r8) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x0, 0x100000001}) r9 = syz_open_pts(r8, 0x4000000000005) r10 = dup3(r9, r8, 0x0) write$UHID_INPUT(r10, &(0x7f00000015c0)={0x8, "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", 0xaf0}, 0x1006) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x3, 0x2, 0xf203, 0x0, 0x8, 0xc1, 0xe1d, r13}, 0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x20ec}}}, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) 20:56:14 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000200)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x5fc, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x8}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1030}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x1de}], 0x390, &(0x7f0000002400)=""/191, 0x1f9}, 0x10}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) [ 441.187082][ T30] usb 2-1: Using ep0 maxpacket: 8 20:56:14 executing program 5: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 20:56:14 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000380)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x3, 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000180)=[{0xffffff81, 0x4, 0x0, 0x0, @time={0x77359400}}], 0x30) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x8}, 0x18) shutdown(r0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x10001, 0x8, 0x9ae1, 0xc96e]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x14}]}, &(0x7f0000000080)=0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}}, 0x98) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup(r8) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x0, 0x100000001}) r9 = syz_open_pts(r8, 0x4000000000005) r10 = dup3(r9, r8, 0x0) write$UHID_INPUT(r10, &(0x7f00000015c0)={0x8, "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", 0xaf0}, 0x1006) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x3, 0x2, 0xf203, 0x0, 0x8, 0xc1, 0xe1d, r13}, 0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x20ec}}}, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) 20:56:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4004ae99, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r5, r4) 20:56:14 executing program 2: r0 = socket$packet(0x11, 0x20000000000003, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @random="e09bf7dbe39f"}, 0x10) r3 = epoll_create1(0x0) dup3(r3, r0, 0x0) [ 441.327489][ T30] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 441.335898][ T30] usb 2-1: config 0 has no interface number 0 [ 441.342234][ T30] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5b.b8 [ 441.351649][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.407591][T14923] device lo entered promiscuous mode [ 441.443806][T14923] device lo left promiscuous mode [ 441.461914][ T30] usb 2-1: config 0 descriptor?? [ 441.498570][T14927] device lo entered promiscuous mode [ 441.505127][T14925] device lo left promiscuous mode [ 441.522141][ T30] kl5kusb105 2-1:0.10: KL5KUSB105D / PalmConnect converter detected [ 441.555555][ T30] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 441.723276][ T30] usb 2-1: USB disconnect, device number 12 [ 441.732922][ T30] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 441.743745][ T30] kl5kusb105 2-1:0.10: device disconnected [ 442.497004][ T12] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 442.736942][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 442.857068][ T12] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 442.865341][ T12] usb 2-1: config 0 has no interface number 0 [ 442.871642][ T12] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=5b.b8 [ 442.880816][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.890342][ T12] usb 2-1: config 0 descriptor?? [ 442.940132][ T12] kl5kusb105 2-1:0.10: KL5KUSB105D / PalmConnect converter detected [ 442.950805][ T12] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 443.139865][ T30] usb 2-1: USB disconnect, device number 13 [ 443.151020][ T30] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 443.161867][ T30] kl5kusb105 2-1:0.10: device disconnected 20:56:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0), 0x4) 20:56:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x10000002) write$evdev(r0, &(0x7f0000000140)=[{}, {}], 0xcfa6c813) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x80044501, 0x0) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 20:56:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 20:56:16 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000380)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x3, 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000180)=[{0xffffff81, 0x4, 0x0, 0x0, @time={0x77359400}}], 0x30) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x8}, 0x18) shutdown(r0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x10001, 0x8, 0x9ae1, 0xc96e]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x14}]}, &(0x7f0000000080)=0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}}, 0x98) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup(r8) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x0, 0x100000001}) r9 = syz_open_pts(r8, 0x4000000000005) r10 = dup3(r9, r8, 0x0) write$UHID_INPUT(r10, &(0x7f00000015c0)={0x8, "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", 0xaf0}, 0x1006) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x3, 0x2, 0xf203, 0x0, 0x8, 0xc1, 0xe1d, r13}, 0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x20ec}}}, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) 20:56:16 executing program 2: r0 = socket$packet(0x11, 0x20000000000003, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @random="e09bf7dbe39f"}, 0x10) r3 = epoll_create1(0x0) dup3(r3, r0, 0x0) 20:56:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4004ae99, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r5, r4) [ 443.730379][T14947] device lo entered promiscuous mode [ 443.758039][T14947] device lo left promiscuous mode 20:56:16 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 20:56:16 executing program 2: r0 = socket$packet(0x11, 0x20000000000003, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @random="e09bf7dbe39f"}, 0x10) r3 = epoll_create1(0x0) dup3(r3, r0, 0x0) 20:56:16 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0), 0x4) 20:56:16 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000380)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x3, 0x3}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r2, &(0x7f0000000180)=[{0xffffff81, 0x4, 0x0, 0x0, @time={0x77359400}}], 0x30) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x8}, 0x18) shutdown(r0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x10001, 0x8, 0x9ae1, 0xc96e]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x14}]}, &(0x7f0000000080)=0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x200, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}}, 0x98) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup(r8) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000140)={0x0, 0x100000001}) r9 = syz_open_pts(r8, 0x4000000000005) r10 = dup3(r9, r8, 0x0) write$UHID_INPUT(r10, &(0x7f00000015c0)={0x8, "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", 0xaf0}, 0x1006) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x3, 0x2, 0xf203, 0x0, 0x8, 0xc1, 0xe1d, r13}, 0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000480)={r7, @in6={{0xa, 0x4e23, 0x5, @mcast2, 0x20ec}}}, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) [ 443.983546][T14964] device lo entered promiscuous mode [ 444.024336][T14964] device lo left promiscuous mode 20:56:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000340), 0xc, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16], 0x2}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0), 0x4) 20:56:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x10000002) write$evdev(r0, &(0x7f0000000140)=[{}, {}], 0xcfa6c813) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x80044501, 0x0) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 20:56:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4004ae99, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r5, r4) 20:56:17 executing program 2: r0 = socket$packet(0x11, 0x20000000000003, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @random="e09bf7dbe39f"}, 0x10) r3 = epoll_create1(0x0) dup3(r3, r0, 0x0) 20:56:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 20:56:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0), 0x4) [ 444.335036][T14982] device lo entered promiscuous mode [ 444.347451][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 444.353775][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 444.364649][T14982] device lo left promiscuous mode 20:56:17 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 20:56:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) rt_sigaction(0x0, &(0x7f0000000140)={&(0x7f0000000000)="41e05a3ef0433049ca460f0f2e9e660fd14500c4c231b665df420f67a800f0b9203e67440f380738260f439c7002000000c4c20dbd149a66448527", {}, 0x0, 0x0}, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) fchmod(r1, 0x104) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') 20:56:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x10000002) write$evdev(r0, &(0x7f0000000140)=[{}, {}], 0xcfa6c813) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x80044501, 0x0) write$evdev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 20:56:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 20:56:17 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc8, &(0x7f0000000140), &(0x7f0000000180)=0x4) 20:56:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 20:56:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x40) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 20:56:18 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc8, &(0x7f0000000140), &(0x7f0000000180)=0x4) 20:56:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r1, 0x2}}, 0x18) 20:56:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x34, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0x2c, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffffffff00000000}}]}]}, 0x2c}}, 0x0) 20:56:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 20:56:18 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc8, &(0x7f0000000140), &(0x7f0000000180)=0x4) 20:56:18 executing program 5: mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mlock2(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x0) 20:56:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="80", 0x1}], 0x1) 20:56:18 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @loopback}], 0x20) 20:56:18 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc8, &(0x7f0000000140), &(0x7f0000000180)=0x4) 20:56:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x264, &(0x7f00000000c0)={@broadcast, @local, [{}], {@generic={0x88ca}}}, 0x0) 20:56:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x2, [@local, @multicast2]}, 0x18) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast2, @local, 0x1, 0x2, [@local, @multicast2]}, 0x18) 20:56:19 executing program 4: unshare(0x24020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)) 20:56:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 20:56:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000414900000004fcff", 0x58}], 0x1) 20:56:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x264, &(0x7f00000000c0)={@broadcast, @local, [{}], {@generic={0x88ca}}}, 0x0) 20:56:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0xb6, 0x7, 0x20, 0x46d, 0x8dd, 0x5e5a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0xb9, 0x89, 0x6a}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 20:56:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x200000001, 0x3, 0x2000000000000009, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000040)="04b59c"}, 0x20) 20:56:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001380)={0x14, 0x5e, 0x301}, 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:56:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x264, &(0x7f00000000c0)={@broadcast, @local, [{}], {@generic={0x88ca}}}, 0x0) 20:56:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket(0x18, 0x0, 0x800000000000002) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x1c, &(0x7f0000000000), 0x20a154cc) 20:56:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0xfffffe12) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x0, 0x2, {0x7}}, 0x18) mount$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) 20:56:19 executing program 5: r0 = socket(0x400000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) [ 446.387027][ T30] usb 4-1: new high-speed USB device number 19 using dummy_hcd 20:56:19 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x3, 0x0, {0x0, 0x0, 0x0, 0x15, 0x1, 0x64}}) 20:56:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x264, &(0x7f00000000c0)={@broadcast, @local, [{}], {@generic={0x88ca}}}, 0x0) 20:56:19 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x180000000) [ 446.638393][ T30] usb 4-1: Using ep0 maxpacket: 32 20:56:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) dup3(r1, r2, 0x0) 20:56:19 executing program 0: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r0, r3}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}}) [ 446.757210][ T30] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 446.765591][ T30] usb 4-1: config 0 has no interface number 0 [ 446.772179][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=5e.5a [ 446.781694][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.872775][ T30] usb 4-1: config 0 descriptor?? [ 446.932068][ T30] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 446.987488][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 446.993761][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 447.578217][ T30] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22 [ 447.780382][ T30] usb 4-1: USB disconnect, device number 19 [ 448.547019][ T30] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 448.786957][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 448.907828][ T30] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 448.916113][ T30] usb 4-1: config 0 has no interface number 0 [ 448.922404][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=5e.5a [ 448.931633][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.941690][ T30] usb 4-1: config 0 descriptor?? [ 448.991952][ T30] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd 20:56:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr, 0x0, 0x3ffffffffffffd50}, 0x10) 20:56:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x4}) 20:56:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000005c00), 0x400000000000210, 0x0) 20:56:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)) 20:56:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0xb6, 0x7, 0x20, 0x46d, 0x8dd, 0x5e5a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0xb9, 0x89, 0x6a}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 20:56:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000140)="f2748ba79354d36f"}) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) [ 449.298389][ T30] gspca_zc3xx: reg_w_i err -71 [ 449.303420][ T30] gspca_zc3xx: probe of 4-1:0.123 failed with error -71 [ 449.370392][ T30] usb 4-1: USB disconnect, device number 20 20:56:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000140)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x1e}, @RTA_GATEWAY={0x14, 0x5, @mcast1}]}, 0x38}}, 0x0) 20:56:22 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x4}) 20:56:22 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x4612}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="1ff8ffff", 0x4}]) r3 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 20:56:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000140)="f2748ba79354d36f"}) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) 20:56:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x48, 0x0, 0x40000010], [0xc1]}) 20:56:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)) [ 449.716652][T15185] kvm [15183]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 20:56:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000140)="f2748ba79354d36f"}) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) [ 449.807300][ T30] usb 4-1: new high-speed USB device number 21 using dummy_hcd 20:56:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000f05000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 20:56:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)) [ 450.047246][ T30] usb 4-1: Using ep0 maxpacket: 32 20:56:23 executing program 2: r0 = eventfd2(0x0, 0x80800) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') sendfile(r0, r1, 0x0, 0x80000000) [ 450.167284][ T30] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 450.175617][ T30] usb 4-1: config 0 has no interface number 0 [ 450.182228][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=5e.5a [ 450.191472][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.253833][ T30] usb 4-1: config 0 descriptor?? [ 450.304061][ T30] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 450.948214][ T30] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 451.156239][T11541] usb 4-1: USB disconnect, device number 21 20:56:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="11dca50d5e0bcfe47bf070") write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000140)="f2748ba79354d36f"}) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) 20:56:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)) 20:56:24 executing program 2: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r0, &(0x7f0000000000), 0x10) 20:56:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x4612}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="1ff8ffff", 0x4}]) r3 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 20:56:24 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x4}) 20:56:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0xb6, 0x7, 0x20, 0x46d, 0x8dd, 0x5e5a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0xb9, 0x89, 0x6a}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 20:56:24 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xfffffffb, 0x9006) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000000000006fa, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") 20:56:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r1, &(0x7f0000000000)=""/40, 0x28) getdents64(r1, &(0x7f0000000280)=""/116, 0x27c) [ 452.027868][T11541] usb 4-1: new high-speed USB device number 22 using dummy_hcd 20:56:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000180)=""/49, 0x31}], 0x1, 0x2c) 20:56:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="290000002000190f03fd3fffffffda060200000000e80001dd0000140d001400ea110000000540", 0x27}], 0x1) fcntl$lock(r0, 0x5, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0x4}) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="290000002000190f03fd3fffffffda060200000000e80001dd0000140d001400ea1100000005400000", 0x29}], 0x1) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) 20:56:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x4612}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="1ff8ffff", 0x4}]) r3 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 452.300437][T11541] usb 4-1: Using ep0 maxpacket: 32 [ 452.429872][T11541] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 452.438320][T11541] usb 4-1: config 0 has no interface number 0 [ 452.444596][T11541] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=5e.5a [ 452.453991][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.515981][T11541] usb 4-1: config 0 descriptor?? [ 452.562654][T11541] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 453.218881][T11541] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 453.437142][ T30] usb 4-1: USB disconnect, device number 22 20:56:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0xb6, 0x7, 0x20, 0x46d, 0x8dd, 0x5e5a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0xb9, 0x89, 0x6a}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 20:56:27 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x4}) 20:56:27 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000ac1414aa00000012a199f8a888a92bf46e20a9b78003d91876c932b5895c305382e6bd5ef923a781b16392dd240ffb4b0a5961332a4569740308b3daf955906d6c220f70e197d806a8914ec6756451974dbca80cdffe2bbd5e435106414f9d0f140a0e15ec35ebf1292b450d49ce2e4190c5cf13096a3c4cd7d0eda4000000460c61d23827b25271251748a1365e2cdf2131074890fb19b349f2c66e22a09ebefefee4a7f810f64e21fcaecbb80fe28396ffff000072bcd81408998a4e1e0d"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x5e) 20:56:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$alg(0x26, 0x5, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 20:56:27 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x4612}) io_setup(0x101, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="1ff8ffff", 0x4}]) r3 = dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 20:56:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xfffffffb, 0x9006) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000000000006fa, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") 20:56:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3f}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x271) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0xf}, {&(0x7f0000000780)=""/98, 0x1e9}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000340)=""/249, 0xf9}], 0x4, &(0x7f0000000440)=""/45, 0x2d}}], 0x4000000000000e9, 0x0, &(0x7f0000000640)={0x77359400}) 20:56:27 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x24020400) close(r1) ioctl$FICLONE(r0, 0x40049409, r1) [ 454.317234][T11541] usb 4-1: new high-speed USB device number 23 using dummy_hcd 20:56:27 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x6) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffe, @tick, {}, {}, @connect}], 0xffffff76) 20:56:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6af3b660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0xfffffffffffffffb}], 0x1, 0x0, 0x0, 0xfffffffffffffe3b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0xf, 0x0, 0xab, 0xfa, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:27 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561c, &(0x7f0000000080)) [ 454.578983][T11541] usb 4-1: Using ep0 maxpacket: 32 20:56:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x6}}) [ 454.639807][T15296] pic_ioport_write: 30 callbacks suppressed [ 454.639822][T15296] kvm: pic: single mode not supported [ 454.717472][T11541] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 454.731398][T11541] usb 4-1: config 0 has no interface number 0 [ 454.737727][T11541] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=5e.5a [ 454.746924][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.827475][T11541] usb 4-1: config 0 descriptor?? [ 454.872215][T11541] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 455.518214][T11541] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 455.723932][T11541] usb 4-1: USB disconnect, device number 23 20:56:29 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x10000000000025, &(0x7f0000000040)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x4}) 20:56:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x3}], 0xf}], 0x3ad, 0x0) 20:56:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @local, 0x0, 0x1, [@rand_addr]}, 0x14) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000026, &(0x7f0000000200)={@multicast2, @local}, 0xc) 20:56:29 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[{0x10}, {0x18, 0x110, 0x1, 'T'}], 0x28}}], 0x1, 0x0) 20:56:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xfffffffb, 0x9006) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000000000006fa, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") 20:56:29 executing program 1: add_key(&(0x7f0000000180)='big_key\x00', 0x0, &(0x7f0000000040)="f9", 0x1, 0xfffffffffffffffc) 20:56:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 20:56:29 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 20:56:29 executing program 3: socket$packet(0x11, 0x3, 0x300) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) unshare(0x400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) [ 456.510348][T15334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 20:56:29 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000002c0)) 20:56:29 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:56:29 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 20:56:30 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 20:56:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$SHM_STAT(0x0, 0xd, 0x0) 20:56:30 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000002c0)) 20:56:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0xc0109207, &(0x7f00000004c0)={&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/168, 0xa8}) 20:56:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xfffffffb, 0x9006) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000000000006fa, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") 20:56:30 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c00020100000009f2ff0001020d0000052406000105240000000d240f0107008103000000090009040100c2010102020d0000090582020000000000090503020000000000000000000000df68f0159033797638fd03bb293a8b956c1b58c8d85d58528a23ebbfc655fdb6d7587789eea1dae57d06164d8a3fae2009cbdf0d3f093a042e471a02341f1423af97ee0abc6ea4098da71e12db87fbd6b30a40961cfbf1dc1116709364ee3dbc208cb89df717ba85ab55bf56"], 0x0) 20:56:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1f0) 20:56:30 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 20:56:30 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000002c0)) 20:56:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x1, 0x0) set_mempolicy(0x4003, &(0x7f0000000000)=0x100000000, 0x3f) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 20:56:30 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000000)={0x3, 0xfffffffffffffffd, 0x0, [], 0x0}) 20:56:30 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000002c0)) 20:56:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x3a, &(0x7f0000000340)=[@cr4={0x1, 0x1080c}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:30 executing program 3: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) 20:56:30 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="580000000000000014012cb6f3750000000000000000000000000000000000000013000000000000003b00"/88], 0x58}, 0x40) [ 457.707216][T11541] usb 1-1: new high-speed USB device number 29 using dummy_hcd 20:56:30 executing program 1: r0 = socket$inet(0x10, 0x2000004000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = dup2(r0, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) r2 = socket(0x410000000014, 0xddfc9b919bd289db, 0x0) socket$netlink(0x10, 0x3, 0xfffffffffffffffc) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4), 0x1c) dup3(r3, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000010f, &(0x7f0000000900)=ANY=[], 0x0, 0x4, 0xea, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/104) openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000002c0)=0x35) fadvise64(r7, 0x0, 0x8000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20000, 0x0) time(&(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000740)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000540)={0x10}) [ 457.947694][T11541] usb 1-1: Using ep0 maxpacket: 16 [ 458.067920][T11541] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.078307][T11541] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 458.087388][T11541] usb 1-1: config 1 has no interface number 0 [ 458.093581][T11541] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 194, using maximum allowed: 30 [ 458.104583][T11541] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 458.107196][ T30] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 458.277712][T11541] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.286929][T11541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.294980][T11541] usb 1-1: Product: syz [ 458.299356][T11541] usb 1-1: Manufacturer: syz [ 458.304033][T11541] usb 1-1: SerialNumber: syz 20:56:31 executing program 2: syz_open_dev$sndtimer(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r2}}, 0x24}}, 0x0) [ 458.387089][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 458.527329][ T30] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 458.536448][ T30] usb 4-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 458.547309][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 458.697502][T11541] usb 1-1: unknown interface protocol 0x2, assuming v1 [ 458.704616][T11541] usb 1-1: cannot find UAC_HEADER [ 458.710457][T11541] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 458.719365][T11541] usb 1-1: USB disconnect, device number 29 [ 458.747405][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.757302][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.765527][ T30] usb 4-1: Product: syz [ 458.769970][ T30] usb 4-1: Manufacturer: syz [ 458.774640][ T30] usb 4-1: SerialNumber: syz [ 458.819501][ T30] cdc_ncm 4-1:1.0: bind() failure [ 459.052722][ T30] usb 4-1: USB disconnect, device number 24 [ 459.357029][ T4896] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 459.597028][ T4896] usb 1-1: Using ep0 maxpacket: 16 [ 459.717170][ T4896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.727745][ T4896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 459.736727][ T4896] usb 1-1: config 1 has no interface number 0 [ 459.743117][ T4896] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 194, using maximum allowed: 30 [ 459.754259][ T4896] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 459.837034][ T30] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 459.927122][ T4896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.936438][ T4896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.944648][ T4896] usb 1-1: Product: syz [ 459.948968][ T4896] usb 1-1: Manufacturer: syz [ 459.953747][ T4896] usb 1-1: SerialNumber: syz [ 460.076996][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 460.197184][ T30] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 460.206238][ T30] usb 4-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 460.216675][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.327319][ T4896] usb 1-1: unknown interface protocol 0x2, assuming v1 [ 460.334250][ T4896] usb 1-1: cannot find UAC_HEADER [ 460.340111][ T4896] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 460.350028][ T4896] usb 1-1: USB disconnect, device number 30 20:56:33 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15203, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226) 20:56:33 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 20:56:33 executing program 1: r0 = socket$inet(0x10, 0x2000004000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = dup2(r0, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) r2 = socket(0x410000000014, 0xddfc9b919bd289db, 0x0) socket$netlink(0x10, 0x3, 0xfffffffffffffffc) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4), 0x1c) dup3(r3, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000010f, &(0x7f0000000900)=ANY=[], 0x0, 0x4, 0xea, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/104) openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000002c0)=0x35) fadvise64(r7, 0x0, 0x8000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20000, 0x0) time(&(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000740)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000540)={0x10}) 20:56:33 executing program 2: syz_open_dev$sndtimer(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r2}}, 0x24}}, 0x0) 20:56:33 executing program 4: r0 = socket$inet(0x10, 0x2000004000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = dup2(r0, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) r2 = socket(0x410000000014, 0xddfc9b919bd289db, 0x0) socket$netlink(0x10, 0x3, 0xfffffffffffffffc) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4), 0x1c) dup3(r3, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000010f, &(0x7f0000000900)=ANY=[], 0x0, 0x4, 0xea, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/104) openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000002c0)=0x35) fadvise64(r7, 0x0, 0x8000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20000, 0x0) time(&(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000740)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000540)={0x10}) [ 460.387300][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.396552][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.404792][ T30] usb 4-1: Product: syz [ 460.409459][ T30] usb 4-1: Manufacturer: syz [ 460.414095][ T30] usb 4-1: SerialNumber: syz [ 460.463688][ T30] cdc_ncm 4-1:1.0: bind() failure 20:56:33 executing program 2: syz_open_dev$sndtimer(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r2}}, 0x24}}, 0x0) 20:56:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x9f}) 20:56:33 executing program 1: r0 = socket$inet(0x10, 0x2000004000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = dup2(r0, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) r2 = socket(0x410000000014, 0xddfc9b919bd289db, 0x0) socket$netlink(0x10, 0x3, 0xfffffffffffffffc) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4), 0x1c) dup3(r3, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000010f, &(0x7f0000000900)=ANY=[], 0x0, 0x4, 0xea, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/104) openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000002c0)=0x35) fadvise64(r7, 0x0, 0x8000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20000, 0x0) time(&(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000740)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000540)={0x10}) [ 460.740355][ T30] usb 4-1: USB disconnect, device number 25 20:56:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000540)={0x3000, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:56:33 executing program 2: syz_open_dev$sndtimer(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r2}}, 0x24}}, 0x0) 20:56:33 executing program 4: r0 = socket$inet(0x10, 0x2000004000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = dup2(r0, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) r2 = socket(0x410000000014, 0xddfc9b919bd289db, 0x0) socket$netlink(0x10, 0x3, 0xfffffffffffffffc) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4), 0x1c) dup3(r3, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000010f, &(0x7f0000000900)=ANY=[], 0x0, 0x4, 0xea, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/104) openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000002c0)=0x35) fadvise64(r7, 0x0, 0x8000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20000, 0x0) time(&(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000740)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000540)={0x10}) 20:56:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty={[0x2]}}]}}}]}, 0x4c}}, 0x0) 20:56:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) 20:56:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 20:56:34 executing program 1: r0 = socket$inet(0x10, 0x2000004000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = dup2(r0, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) r2 = socket(0x410000000014, 0xddfc9b919bd289db, 0x0) socket$netlink(0x10, 0x3, 0xfffffffffffffffc) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4), 0x1c) dup3(r3, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000010f, &(0x7f0000000900)=ANY=[], 0x0, 0x4, 0xea, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/104) openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000002c0)=0x35) fadvise64(r7, 0x0, 0x8000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20000, 0x0) time(&(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000740)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000540)={0x10}) 20:56:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe4c, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x12, 0xfffffff00000003}]}}}]}, 0x3c}}, 0x0) 20:56:34 executing program 3: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) 20:56:34 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x8000000000000003}, 0x2b) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000080), 0x23c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000001540)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 20:56:34 executing program 4: r0 = socket$inet(0x10, 0x2000004000000003, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = dup2(r0, r0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80000) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x0) r2 = socket(0x410000000014, 0xddfc9b919bd289db, 0x0) socket$netlink(0x10, 0x3, 0xfffffffffffffffc) sendmsg$nl_generic(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000f67fe4), 0x1c) dup3(r3, r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx2\x00'}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000010f, &(0x7f0000000900)=ANY=[], 0x0, 0x4, 0xea, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)=""/104) openat$rtc(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f00000002c0)=0x35) fadvise64(r7, 0x0, 0x8000, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20000, 0x0) time(&(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000740)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000540)={0x10}) 20:56:34 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$getsig(0x4209, r1, 0x760004, 0x0) 20:56:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090464fe07002b0000000100ff071400000045000103000000140e0001000900250000c5b212dc000000000000000075e61bba", 0x39}], 0x1) 20:56:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\x96\xf7,k\x1a+@\xe54\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) mlockall(0x2) 20:56:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{{0x2}, 0x0, 0x1}], 0xe0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)) 20:56:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x1) read(r0, 0x0, 0xe2) [ 461.625691][T15496] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 20:56:34 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x5420) 20:56:34 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x100000000000ff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr="01b5ef85910252e6c4efa9bca4e63135"}, {0xa, 0x0, 0x0, @rand_addr="d9ae84d566afd5258cac14436b02c484"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10006]}, 0x5c) sendmsg$key(r0, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x2a}, 0x2}, 0x0) 20:56:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) 20:56:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x101002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x0, 0x2}], 0xfe72) 20:56:35 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1cc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x4058534c, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 20:56:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00tb\xb61|\xf5E\xe8p\xfal\x99\\-\xbd1\xaf,\xa5\xe7\xb2J\x13\x18\xd0\x93VF\xcf]\xa9_\xf3g\x17\xc4f\xdfA\xd9\x83\xff\x93\xeb\xc6\xbaK\xc2\x7f7\x040c ^g\xa7\xce\x0ed\x89(\xa4\xe6r\xf9\xb4\xa7\xdc\xb1\xea\a\xb9E\x8b^f[zN-\xb8\xb3\x8a\xeca\x85M\xd9C1\xd4\x15\xe8>\xf2lnrE\xe4\xef5\xcc\x82\x03\xb2\xdf<[\x05\xc9\xdc\xaf\xe7l\xe0\xe9\xfa\xc0\xdc\xff\xef\xc1\xbd\xb2]\xc3\x97v\x9e\x02\xab\x02\x84\xba\x11\x11Z\xf3', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10) 20:56:35 executing program 2: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffd60}, {&(0x7f0000000440)=""/131, 0xffffffffffffff0f}], 0x5, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}, 0x128) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000340), 0x584, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) 20:56:35 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 20:56:35 executing program 3: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) r0 = open(&(0x7f0000000600)='./bus\x00', 0x8800, 0x0) unshare(0x400) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="8a", 0x1}], 0x1, 0x0) 20:56:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r3, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)="8d", 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000080)}]) r4 = dup3(r1, r2, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 20:56:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x24, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) sendmmsg$inet(r0, &(0x7f0000007180)=[{{&(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="e2", 0x1}], 0x1}}], 0x1, 0x0) 20:56:35 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c008161ab0925000900070002ab08002500000000007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0x43) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 20:56:35 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20:56:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}}}, 0xe8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2}, 0x80, 0x0}}], 0x1, 0x0) 20:56:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 462.679133][T15555] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 20:56:35 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="002c401257b62a355f1198d0ac1982fbaf7b1c403493d3f22a0673f666cdd61660b3c7e7dda025fac56facac92aef6e525d540feee6a6514e5f9ccbcb83a15875f603b81cf1be7c809f8b53a54553eb2b7c8cdece66fc4b9435c466785172efd3eff25acfe2e9bf74d727343572eddd6f8cb204827079dbf8804607edeff7ac7f4075a8c2150e945f5939cc69a9f8ee98f6c3612161ec73fd89e27dc8c9a096243cfe52c64738e2545351585330f479f23ba4c0b6edb8fdebb9ae36bc1de07347843930dd483d0c0"}) [ 462.927348][T11541] usb 2-1: new high-speed USB device number 14 using dummy_hcd 20:56:36 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1cc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x4058534c, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 20:56:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x40000}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 20:56:36 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0xc, @output}) 20:56:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x40000}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 20:56:36 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1cc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x4058534c, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) [ 463.187223][T11541] usb 2-1: Using ep0 maxpacket: 32 20:56:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x5) 20:56:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x40000}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) [ 463.329115][T11541] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.340525][T11541] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 463.350553][T11541] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 463.424216][T15566] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 20:56:36 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5bc1}, 0x1c) [ 463.557377][T11541] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.566580][T11541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.574849][T11541] usb 2-1: Product: syz [ 463.579179][T11541] usb 2-1: Manufacturer: syz [ 463.583971][T11541] usb 2-1: SerialNumber: syz [ 464.287551][T11541] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 464.293936][T11541] cdc_ncm 2-1:1.0: bind() failure [ 464.302996][T11541] cdc_ncm 2-1:1.1: bind() failure [ 464.312020][T11541] usb 2-1: USB disconnect, device number 14 [ 465.057056][ T30] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 465.317029][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 465.467155][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.478449][ T30] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 465.488385][ T30] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 465.657312][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.666800][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.674979][ T30] usb 2-1: Product: syz [ 465.679289][ T30] usb 2-1: Manufacturer: syz [ 465.684108][ T30] usb 2-1: SerialNumber: syz 20:56:38 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x59565955}) 20:56:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x40000}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0) 20:56:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000040)="00c0080101f191c41bb9a964ae557b0daae2cf32d421cac1799b5cd01502000000870fb8790000000000", 0x2a, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 20:56:38 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1cc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x4058534c, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 20:56:38 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1cc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x4058534c, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 20:56:38 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 465.844079][ T30] cdc_ncm 2-1:1.0: bind() failure [ 465.855774][ T30] cdc_ncm 2-1:1.1: bind() failure 20:56:38 executing program 0: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000080)=r1, 0x4) [ 465.975946][ T30] usb 2-1: USB disconnect, device number 15 20:56:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 20:56:39 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5e}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 20:56:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000000)="e142f15ca4", 0x5, 0x0, 0x0, 0x0) 20:56:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ftruncate(r2, 0x0) 20:56:39 executing program 3: syz_usb_connect(0x2, 0x48, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xc3, 0x92, 0x64, 0x20, 0x8086, 0x181, 0x468f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x4, 0x13, 0x1a, 0xaa, 0x0, [], [{{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x87}}, {{0x9, 0x5, 0xee73dd15b2b98c8d}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:56:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 20:56:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 20:56:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r2, 0x894a, &(0x7f0000003540)={'bond0\x00\xe1\x00\n\x00!\x18\x0f\xda\b\x00', @ifru_data=0x0}) [ 466.429930][ T30] usb 2-1: new high-speed USB device number 16 using dummy_hcd 20:56:39 executing program 5: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1cc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x4058534c, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 20:56:39 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1cc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x4058534c, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) [ 466.654347][ T4896] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 466.677689][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 466.797407][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.808959][ T30] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 466.819766][ T30] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 466.987262][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.996734][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.006009][ T30] usb 2-1: Product: syz [ 467.010946][ T30] usb 2-1: Manufacturer: syz [ 467.015995][ T30] usb 2-1: SerialNumber: syz [ 467.024133][ T4896] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 467.032972][ T4896] usb 4-1: config 0 has no interface number 0 [ 467.039572][ T4896] usb 4-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 467.048987][ T4896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.064170][ T4896] usb 4-1: config 0 descriptor?? [ 467.109211][ T4896] i2400m_usb 4-1:0.216: device not connected as high speed [ 467.117796][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.126169][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.135140][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.143804][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.153229][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.162399][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.171595][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.180008][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.188651][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.197672][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.206194][ T4896] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 467.218187][ T4896] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 467.226156][ T4896] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 467.234909][ T4896] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 467.245446][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.254019][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.262493][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.271198][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.280025][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.288783][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.297965][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.306392][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.316200][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.325358][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.333803][ T4896] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 467.345157][ T4896] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 467.353086][ T4896] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 467.362011][ T4896] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 467.373013][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.381992][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.390397][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.398796][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.407296][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.415610][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.424932][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.433438][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.441958][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.450577][ T4896] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 467.459288][ T4896] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 467.470180][ T4896] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 467.478132][ T4896] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 467.486449][ T4896] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 467.497128][ T4896] i2400m_usb 4-1:0.216: Timed out waiting for reboot ack [ 467.504230][ T4896] i2400m_usb 4-1:0.216: read mac addr: bootrom init failed: -110 [ 467.512237][ T4896] i2400m_usb 4-1:0.216: cannot setup device: -110 [ 467.519008][ T4896] i2400m_usb: probe of 4-1:0.216 failed with error -110 [ 467.546079][ T4896] usb 4-1: USB disconnect, device number 26 [ 467.787386][ T30] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 467.793546][ T30] cdc_ncm 2-1:1.0: bind() failure [ 467.803444][ T30] cdc_ncm 2-1:1.1: bind() failure [ 467.818040][ T30] usb 2-1: USB disconnect, device number 16 [ 468.126998][T11541] usb 4-1: new full-speed USB device number 27 using dummy_hcd 20:56:41 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20:56:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) r1 = socket(0x40000000002, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x80004e22, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 20:56:41 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) 20:56:41 executing program 5: syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5d, 0x0, 0xb3, 0x8, 0x499, 0x1042, 0x176a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x44, 0x0, 0x1, 0x12, 0x8e, 0x1d, 0x0, [@usb_cdc={{0x5}, {0x5}, {0xd}, [@acm={0x4}]}], [{{0x9, 0x5, 0x8c, 0x3, 0x8}}]}}]}}]}}, 0x0) 20:56:41 executing program 2: unshare(0x400) r0 = socket$kcm(0x10, 0x8000000000002, 0x0) shutdown(r0, 0x0) 20:56:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x2) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) [ 468.525593][T15715] input: syz0 as /devices/virtual/input/input26 [ 468.534854][T11541] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 468.543307][T11541] usb 4-1: config 0 has no interface number 0 [ 468.549801][T11541] usb 4-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 468.559147][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.570902][T11541] usb 4-1: config 0 descriptor?? [ 468.608863][T11541] i2400m_usb 4-1:0.216: device not connected as high speed [ 468.616766][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.625292][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.634135][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.642558][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.650948][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.657074][T15718] input: syz0 as /devices/virtual/input/input27 [ 468.659320][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.674062][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.682434][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.690795][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.699173][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.707725][T11541] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 468.718715][T11541] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 468.726546][T11541] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 468.735132][T11541] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 468.745541][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.753864][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.762338][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.770685][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.779219][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.787612][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.795916][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.804291][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.812656][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.821022][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.829466][T11541] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 468.840536][T11541] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 468.848432][T11541] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 468.856938][T11541] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 468.867356][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.875612][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.883988][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.892286][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.900891][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.909337][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.917747][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.926036][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.934526][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.942994][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 468.951376][T11541] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 468.962232][T11541] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 468.970159][T11541] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 468.978491][T11541] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 468.989549][T11541] i2400m_usb 4-1:0.216: Timed out waiting for reboot ack [ 468.996629][T11541] i2400m_usb 4-1:0.216: read mac addr: bootrom init failed: -110 [ 469.004607][T11541] i2400m_usb 4-1:0.216: cannot setup device: -110 [ 469.011335][T11541] i2400m_usb: probe of 4-1:0.216 failed with error -110 [ 469.023174][ T12] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 469.031089][ T2915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 469.039550][T11541] usb 4-1: USB disconnect, device number 27 [ 469.277023][ T2915] usb 2-1: Using ep0 maxpacket: 32 [ 469.282407][ T12] usb 6-1: Using ep0 maxpacket: 8 20:56:42 executing program 3: syz_usb_connect(0x2, 0x48, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xc3, 0x92, 0x64, 0x20, 0x8086, 0x181, 0x468f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x4, 0x13, 0x1a, 0xaa, 0x0, [], [{{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x87}}, {{0x9, 0x5, 0xee73dd15b2b98c8d}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:56:42 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) pread64(r0, 0x0, 0x0, 0x0) 20:56:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c1207849bd070") r1 = creat(&(0x7f00000017c0)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000093000/0x3000)=nil, 0x3000, 0x0, 0x4002012, r2, 0x80000000000) fallocate(r1, 0x3, 0x0, 0xcd55) 20:56:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bridge\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvfrom$unix(r1, 0x0, 0x0, 0x20, 0x0, 0x0) [ 469.407764][ T2915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.410549][T15728] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 469.418921][ T2915] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 469.419005][ T2915] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 469.446524][ T12] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 469.454877][ T12] usb 6-1: config 0 has no interface number 0 [ 469.461193][ T12] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 469.472371][ T12] usb 6-1: New USB device found, idVendor=0499, idProduct=1042, bcdDevice=17.6a [ 469.481589][ T12] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:56:42 executing program 0: move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) 20:56:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bridge\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvfrom$unix(r1, 0x0, 0x0, 0x20, 0x0, 0x0) [ 469.521144][ T12] usb 6-1: config 0 descriptor?? [ 469.637290][ T2915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.646645][ T2915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.654860][ T2915] usb 2-1: Product: syz [ 469.659206][ T2915] usb 2-1: Manufacturer: syz [ 469.663903][ T2915] usb 2-1: SerialNumber: syz [ 469.763215][ T12] usb 6-1: USB disconnect, device number 11 [ 469.771092][T11541] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 470.157129][T11541] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 470.165550][T11541] usb 4-1: config 0 has no interface number 0 [ 470.171932][T11541] usb 4-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 470.181084][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.191195][T11541] usb 4-1: config 0 descriptor?? [ 470.228687][T11541] i2400m_usb 4-1:0.216: device not connected as high speed [ 470.236548][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.245065][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.253484][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.261918][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.270554][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.278913][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.287335][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.295696][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.304096][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.312471][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.320876][T11541] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 470.331712][T11541] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 470.339643][T11541] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 470.348005][T11541] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 470.358331][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.366604][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.374976][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.383385][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.391758][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.400130][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.408530][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.417039][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.425482][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.433895][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.442254][T11541] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 470.453139][T11541] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 470.461075][T11541] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 470.469417][T11541] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 470.480661][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.489076][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.497647][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.506075][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.515119][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.523432][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.532011][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.540462][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.548852][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.557675][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 470.566091][T11541] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 470.577120][T11541] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 470.585003][T11541] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 470.593632][T11541] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 470.603870][T11541] i2400m_usb 4-1:0.216: Timed out waiting for reboot ack [ 470.607145][ T30] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 470.611022][T11541] i2400m_usb 4-1:0.216: read mac addr: bootrom init failed: -110 [ 470.611146][T11541] i2400m_usb 4-1:0.216: cannot setup device: -110 [ 470.633107][T11541] i2400m_usb: probe of 4-1:0.216 failed with error -110 [ 470.658039][ T2915] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 470.664296][ T2915] cdc_ncm 2-1:1.0: bind() failure [ 470.675481][ T2915] cdc_ncm 2-1:1.1: bind() failure [ 470.697159][ T2915] usb 2-1: USB disconnect, device number 17 [ 470.710640][T11541] usb 4-1: USB disconnect, device number 28 [ 470.867001][ T30] usb 6-1: Using ep0 maxpacket: 8 20:56:43 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20:56:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bridge\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvfrom$unix(r1, 0x0, 0x0, 0x20, 0x0, 0x0) 20:56:43 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r0, 0x0) msgsnd(0x0, &(0x7f0000000140), 0x8, 0x0) [ 470.991403][ T30] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 470.999664][ T30] usb 6-1: config 0 has no interface number 0 [ 470.999756][ T30] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 471.016962][ T30] usb 6-1: New USB device found, idVendor=0499, idProduct=1042, bcdDevice=17.6a [ 471.026097][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.114187][ T30] usb 6-1: config 0 descriptor?? 20:56:44 executing program 5: r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000340)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 20:56:44 executing program 2: clone(0x400200000041fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000015, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getsig(0x2, r0, 0x0, 0x0) 20:56:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bridge\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvfrom$unix(r1, 0x0, 0x0, 0x20, 0x0, 0x0) 20:56:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, 0x20000000000031, 0x11d, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @binary="9262e42416716e41471a65aafa"}]}]}, 0x2c}}, 0x0) 20:56:44 executing program 3: syz_usb_connect(0x2, 0x48, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xc3, 0x92, 0x64, 0x20, 0x8086, 0x181, 0x468f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x4, 0x13, 0x1a, 0xaa, 0x0, [], [{{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x87}}, {{0x9, 0x5, 0xee73dd15b2b98c8d}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 471.347109][ T2915] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 471.371161][ T30] usb 6-1: USB disconnect, device number 12 20:56:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = dup2(r0, r2) dup3(r4, r1, 0x0) 20:56:44 executing program 4: mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0, 0x0) 20:56:44 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000010c0)=0x916, 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 471.618038][ T2915] usb 2-1: Using ep0 maxpacket: 32 20:56:44 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x7fffffff}, {0x3}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 471.697621][T11541] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 471.737643][ T2915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.748899][ T2915] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 471.758849][ T2915] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 471.937643][ T2915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.947667][ T2915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.955774][ T2915] usb 2-1: Product: syz [ 471.960084][ T2915] usb 2-1: Manufacturer: syz [ 471.965086][ T2915] usb 2-1: SerialNumber: syz [ 472.087294][T11541] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 472.095678][T11541] usb 4-1: config 0 has no interface number 0 [ 472.102068][T11541] usb 4-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 472.111329][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.120998][T11541] usb 4-1: config 0 descriptor?? [ 472.159124][T11541] i2400m_usb 4-1:0.216: device not connected as high speed [ 472.167313][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.175644][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.184056][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.192506][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.200935][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.209352][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.217743][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.226077][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.234428][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.242810][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.251231][T11541] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 472.262124][T11541] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 472.270113][T11541] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 472.278677][T11541] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 472.289286][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.297672][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.306001][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.314433][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.322876][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.331278][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.339701][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.348108][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.356479][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.364862][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.373266][T11541] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 472.384150][T11541] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 472.392050][T11541] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 472.400466][T11541] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 472.410853][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.419270][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.427683][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.435946][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.444300][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.452604][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.460944][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.469231][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.477749][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.486002][T11541] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 472.494373][T11541] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 472.505549][T11541] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 472.514046][T11541] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 472.522763][T11541] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 472.533515][T11541] i2400m_usb 4-1:0.216: Timed out waiting for reboot ack [ 472.540741][T11541] i2400m_usb 4-1:0.216: read mac addr: bootrom init failed: -110 [ 472.548702][T11541] i2400m_usb 4-1:0.216: cannot setup device: -110 [ 472.556124][T11541] i2400m_usb: probe of 4-1:0.216 failed with error -110 [ 472.574921][T11541] usb 4-1: USB disconnect, device number 29 [ 472.827310][ T2915] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 472.833605][ T2915] cdc_ncm 2-1:1.0: bind() failure [ 472.843964][ T2915] cdc_ncm 2-1:1.1: bind() failure [ 472.852958][ T2915] usb 2-1: USB disconnect, device number 18 20:56:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) memfd_create(0x0, 0xf) 20:56:46 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000010c0)=0x916, 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 20:56:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = dup2(r0, r2) dup3(r4, r1, 0x0) 20:56:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x81}, 0x10) 20:56:46 executing program 3: syz_usb_connect(0x2, 0x48, &(0x7f0000001b80)={{0x12, 0x1, 0x0, 0xc3, 0x92, 0x64, 0x20, 0x8086, 0x181, 0x468f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x4, 0x13, 0x1a, 0xaa, 0x0, [], [{{0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x87}}, {{0x9, 0x5, 0xee73dd15b2b98c8d}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 20:56:46 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000010c0)=0x916, 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) 20:56:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x0, @remote}], 0x16) 20:56:46 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') unshare(0x20000) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 20:56:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = dup2(r0, r2) dup3(r4, r1, 0x0) 20:56:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x560}]}) 20:56:46 executing program 4: r0 = socket$inet(0x10, 0x100000000002, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 473.697166][ T2915] usb 4-1: new full-speed USB device number 30 using dummy_hcd 20:56:46 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000010c0)=0x916, 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x10a, &(0x7f00000011c0)}}], 0x4000000000000ce, 0x0) [ 473.782916][T15841] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 20:56:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x64, &(0x7f00000000c0), 0x10) r5 = dup2(r2, r4) dup3(r5, r3, 0x0) 20:56:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6c, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = dup2(r0, r2) dup3(r4, r1, 0x0) 20:56:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0xf, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000280)={0x0, 0x0}, 0x10) 20:56:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x583, 0xc54842d) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x88, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000180)) [ 474.057317][ T2915] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 474.065702][ T2915] usb 4-1: config 0 has no interface number 0 [ 474.072438][ T2915] usb 4-1: New USB device found, idVendor=8086, idProduct=0181, bcdDevice=46.8f [ 474.081795][ T2915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.138450][T15868] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 474.201999][ T2915] usb 4-1: config 0 descriptor?? [ 474.249155][ T2915] i2400m_usb 4-1:0.216: device not connected as high speed [ 474.257150][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.265481][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.274393][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.282848][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.291258][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.299705][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.308107][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.316450][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.324912][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.333592][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.342067][ T2915] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 474.353128][ T2915] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 474.361121][ T2915] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 474.369664][ T2915] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 474.380169][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.388588][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.397108][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.405506][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.413940][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.422331][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.430743][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.439161][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.447616][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.455936][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.464342][ T2915] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 474.475335][ T2915] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 474.483299][ T2915] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 474.491705][ T2915] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 474.502082][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.510538][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.519038][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.527486][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.535823][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.544538][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.553160][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.561804][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.570697][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.580806][ T2915] i2400m_usb 4-1:0.216: W: __i2400mu_send_barker: cannot send URB: -8 [ 474.589436][ T2915] i2400m_usb 4-1:0.216: E: __i2400mu_send_barker: maximum errors in URB exceeded; resetting device [ 474.603030][ T2915] i2400m_usb 4-1:0.216: warm reset failed (-8); trying USB reset [ 474.611161][ T2915] i2400m_usb 4-1:0.216: boot-mode cmd -1: error waiting for an ack: -8 [ 474.621137][ T2915] i2400m_usb 4-1:0.216: device reboot: error -8 while waiting for reboot barker - rebooting [ 474.631365][ T2915] i2400m_usb 4-1:0.216: Timed out waiting for reboot ack [ 474.638571][ T2915] i2400m_usb 4-1:0.216: read mac addr: bootrom init failed: -110 [ 474.647608][ T2915] i2400m_usb 4-1:0.216: cannot setup device: -110 [ 474.654535][ T2915] i2400m_usb: probe of 4-1:0.216 failed with error -110 [ 474.685316][ T2915] usb 4-1: USB disconnect, device number 30 20:56:48 executing program 0: r0 = socket$inet6(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x1b6) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr="8a5eff487343a5b580df2dc7c18cd3b2"}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="18", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="8f", 0x33c00}], 0x1}}], 0x2, 0x0) 20:56:48 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 20:56:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000fd083be0ec6060d62bdfe57c3387745"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) 20:56:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001d40)=""/155, &(0x7f0000001e00)=0x9b) 20:56:48 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000740)={0xffffffffeffffffd, 0x0, @start}) [ 475.281838][T15880] IPVS: length: 155 != 24 20:56:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x3}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 20:56:48 executing program 3: r0 = socket(0x1200040000000015, 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x2]}, 0x8001}, 0x1c) 20:56:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\xd7\xc5\xf8\x9c!\x8a\xaat\xff\a\xc2t\xbe\xc4K\xcf\xb1\xb8I\xcfzg&\xaa\xef.\xb8\xdf\xed\x9e^\x8e\xf66\t\xba\x16}\xab\x00\x00\x00\x00\x00\x00\x00\x89\xbe\xdd\xf3_\xef\x0e,\x89\x0f\xe3}\xfe\x95\x96|\x8ey\xf8\xbc\xe8n\\\xbf\x89\xe7') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x4, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 20:56:48 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000018007f5f00fe01b2a4a2909302060402fe000001000009003900090035000c021600000019000b4023dc0b00000022dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4f7826de", 0x55}], 0x1}, 0x0) [ 475.414224][T15896] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 475.430256][T15891] RDS: rds_bind could not find a transport for fe80:200::bb, load rds_tcp or rds_rdma? 20:56:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000fd083be0ec6060d62bdfe57c3387745"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) [ 475.482928][T15900] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 20:56:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000fd083be0ec6060d62bdfe57c3387745"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) 20:56:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x200040000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2718, 0x0, &(0x7f000033bffc)) 20:56:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x6c}, [@ldst={0x3fd, 0x0, 0x203701}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 20:56:48 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e9c26a084c05e1022d400000000109022400010000010109040002eb30d10009058f02ada98f4f0009050212936bd9540014000000ac0d3e3f2b35a8e9a904f70c082da9946e395459f0d065aa62aa8fdd999c9a6a199a718cd2c4c20abe34a46b5eeb3d018c0236e783a1162e7286c39c78da83bcd1454b531ddc051fbc229f5d2aaaa671308491b47a1b4d74177f00"], 0x0) 20:56:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080)) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 20:56:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="24000000160007121dff18946f610400020000001f0000000000080008000a000400ff7e280000001100ff0000000010000000000000f035b0cb3f00000ef24d8238cfa50223f7efbf760000", 0x4c}], 0x1}, 0x0) 20:56:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000fd083be0ec6060d62bdfe57c3387745"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) 20:56:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000fd083be0ec6060d62bdfe57c3387745"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) 20:56:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x6c}, [@ldst={0x3fd, 0x0, 0x203701}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 476.011418][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 476.077751][ T2915] usb 1-1: new high-speed USB device number 31 using dummy_hcd 20:56:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000fd083be0ec6060d62bdfe57c3387745"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) 20:56:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x6c}, [@ldst={0x3fd, 0x0, 0x203701}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 20:56:49 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x0, 0x0, 0xa}, 0x90) setsockopt(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 20:56:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000004000089a9cecd8d5a4cccb576c20bbfdef1551f07000000bd164466000000001ff75400003c00009f01000000000000000fd083be0ec6060d62bdfe57c3387745"]) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)) [ 476.328966][ T2915] usb 1-1: Using ep0 maxpacket: 8 20:56:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, 0x0) 20:56:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x80ffffff, 0x6c}, [@ldst={0x3fd, 0x0, 0x203701}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 476.518530][ T2915] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 476.529006][ T2915] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 235, using maximum allowed: 30 [ 476.539987][ T2915] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 235 [ 476.553200][ T2915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 476.559998][ T2915] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=40.2d [ 476.569169][ T2915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.590237][ T2915] usb 1-1: config 0 descriptor?? [ 476.857234][ T2915] usb 1-1: string descriptor 0 read error: -71 [ 476.864307][ T2915] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 476.879489][ T2915] usb 1-1: USB disconnect, device number 31 [ 477.597032][ T2915] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 477.837082][ T2915] usb 1-1: Using ep0 maxpacket: 8 [ 477.957225][ T2915] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 477.967776][ T2915] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 235, using maximum allowed: 30 [ 477.978769][ T2915] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 235 [ 477.991966][ T2915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 477.998752][ T2915] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=40.2d [ 478.007937][ T2915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.017446][ T2915] usb 1-1: config 0 descriptor?? [ 478.297282][ T2915] usb 1-1: string descriptor 0 read error: -71 [ 478.304243][ T2915] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 478.319208][ T2915] usb 1-1: USB disconnect, device number 32 20:56:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12}]}, 0x24}}, 0x0) 20:56:51 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59957a", 0x43}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:56:51 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) 20:56:51 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="e5ff0400bddd00000800160005000000"], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:56:51 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x100000000000d, 0x1, 0x0, "616052ea13ab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 20:56:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080)) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 20:56:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x400) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8010aebb, &(0x7f0000000080)) [ 478.848447][T15979] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 478.857071][T15979] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 478.865199][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 478.875272][T15979] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (162) 20:56:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12}]}, 0x24}}, 0x0) 20:56:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(r0, &(0x7f0000000200)="200000001200010000000066835f7f081c140000000000000100000004001e00", 0x20) 20:56:52 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="5500000018007f5f00fe02b2a4a280930206030000050001000000103900090035000c021400000019000540a8000600000022dc1338d54600009b84016ef75afb83de4411001200c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x400000100080003, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x2e7, 0x0) 20:56:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="1203ce", 0x3}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 20:56:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12}]}, 0x24}}, 0x0) 20:56:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 20:56:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600202e0a"], 0x3e80000) ioctl$int_in(r0, 0x2080080000005008, 0x0) 20:56:54 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x0, 0x2402}}, 0x68) write$vnet(r0, &(0x7f0000000040)={0x1, {&(0x7f00000001c0)=""/210, 0xd2, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f0000000540)=""/80, 0x50, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f0000000000)=""/24, 0x18, 0x0, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x142, 0x0, 0x0, 0x3}}, 0x68) 20:56:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12}]}, 0x24}}, 0x0) 20:56:54 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000050000000a004e2000000000fd880001000000000004000000000100010000000000000000000000000000000000000000000000000000000000000087e76d3b000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000004c4752ad1f1b84cc7b81c12500000000000000010000000000000000000000b232f7587692966cfe8800ba8138a710e1e61a56aff8fa130000ffffffec0000d785d0c93100000000010000000000000000000000000200000000000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000389ede788cde529313d1cd2ae0003018000000000000000000190000000000000000000000cd7671f8000000000011004e210000007ffe8000000000000000000000000000b301f79011cf9f8f0a210001000000000000000000000000000000000000000000000000000000004c0000000000000000000000000000000000000000000000000000000000220000081f00000000000000000000000000000000100000000000000000000000000000000000000000000a004e2300000006fe800000000000000000000000000000000000000000001e13000000000000006e63c91a0000000000000000000000000e0800000000000000000000000000000000000000000000000000000a00000000000000ff010000000000000000000000000001bc9a0000dd00f7ffffffffffffff00000000000000000000000000000000000000000000e6ff2000000000000000000000000000000000000000000000f03f0000000000000000000000000000000000000000000000000000000000000000a6628ae51a928d59000000000000000000662588ac8f738aef8d9c271882346632e3be275ed633fabca0418fbd69a6236740ef53d02d6bf8b6e8cb8883000000000000000000000000879bff298aa7659ba42b27f08f078a93ca14e4d00219b19d215473a52bbc861ee719d829e5a875b890fe495fec741e6ee4fef922a4fa18e79757925ef0021a1d8b4fa8d7fb105e9e2d115fc203f0e545db7c7adead5fc80000000000000000000000000000767853e8c9b757b04890963125c1d98b355295ffb4930fc458b6abad52903aaf16e4c5932e0dfee7eb22266da9adfc7cb25e03029d7b1eeb61b72fb39b6ea1b5718b2029341efa2552244b728c1fbb45d1987c7f010caa67466a8efc5e288a9a21dd0e022839cc7dd0613607d2d504716fc76aaa42efea2ad06442de0e1b66ed83d3795194ee3576500f3654044f59aa63f5ad06e2727f0e9590e11f1589a7956a9e778d9a4a362ed2e70503e790f223259be9a6214dce62e1ed4053abbe8a5c99baa75cc0956dd840bdab60de2c8af79c24fdf67d2c213de885595969188071e6fb5bae6866afc9452438b49134da66022c6565f6cc103ee80a5b2597ab33eb256473e477598e462de7055cab6d12bf43dd29521293795d5386368dce9f7e15074878f7f90b7f452c396005e69c97afb23ae904917337c6bd8fc37bc7782fdf3d1bac6d6a6723796f6fee8bed508d2553946c3d3eb31aa30f465919516e7838b554eb0d97ea2127adb7767d30160207a04948f9320142348a7ee21fdd03d7161f67a24cbf6ea8fd36d69c904d0005a12fa2e1ff78dca77eb7826e54535db505529c46bacb5a8b"], 0x310) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r1) 20:56:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080)) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 20:56:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/.roup.stat\x00<#\xfbWKM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc4\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,\xeb\xd3\xb6\xab\xf6-\x99j\xdd\xb0z\xa3\xcd\xe4pe+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x00\x00\x00\x00K\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) 20:56:55 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x2400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) 20:56:55 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x914, 0x0) 20:56:55 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x310) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r1) 20:56:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x3, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xfeffffff00000000}}]}]}, 0x2c}}, 0x0) [ 482.426128][T16043] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 20:56:55 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x310) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r1) 20:56:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_int(r2, &(0x7f0000000400)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x17) splice(r3, 0x0, r5, 0x0, 0x17, 0x0) 20:56:56 executing program 1: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x0, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x0, r0}) 20:56:56 executing program 5: unshare(0x28020400) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 20:56:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000660007011dfffd940101830020200a000900000000000004000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 20:56:56 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x310) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x1100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r1) 20:56:56 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_pgetevents(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") io_submit(r1, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040040000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 20:56:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000080)) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) [ 483.643860][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:56:56 executing program 4: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:56:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001200)={r1, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000012c0)=0x98) 20:56:56 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000380)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x7fffffff}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x5, 0x80000}) 20:56:56 executing program 3: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r0, 0x0) ftruncate(r0, 0x10004) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='ppp1lonodev&bdev/\x00') 20:56:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000400)={"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"}) 20:56:57 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20600) pselect6(0x40, &(0x7f0000000040)={0x3f}, 0x0, 0x0, 0x0, 0x0) 20:56:57 executing program 0: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000c00)="84", 0x1}]) 20:56:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000400)={"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"}) 20:56:57 executing program 4: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:56:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001200)={r1, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000012c0)=0x98) 20:56:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x114, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf4, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0xe0, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x3}, @IFLA_GRE_IFLAGS={0x8, 0x2, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}], @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x7f}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_DIR={0xfffffffffffffd15}], @gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x7}, @IFLA_GRE_IFLAGS={0x8, 0x2, 0x8001}, @IFLA_GRE_TTL={0x8, 0x8, 0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x1ff}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x75493}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x201}, @IFLA_GRE_TOS={0x8, 0x9, 0xffffffffffffffff}, @IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_FLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x1}], @gre_common_policy=[@IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_TTL={0x8, 0x8, 0x1ff}, @IFLA_GRE_IGNORE_DF={0x8, 0x13, 0x1}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_PMTUDISC={0x8}]]}}}]}, 0x114}}, 0x4000000) 20:56:57 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 20:56:57 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_matches\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 20:56:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000400)={"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"}) [ 484.932314][T16134] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 484.941155][T16134] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 484.949413][T16134] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 484.957712][T16134] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 484.965945][T16134] netlink: 'syz-executor.0': attribute type 24 has an invalid length. [ 484.974255][T16134] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. 20:56:58 executing program 2: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:56:58 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:56:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x1) 20:56:58 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) sendmmsg$inet(r0, &(0x7f0000004000)=[{{&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840), 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) 20:56:58 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) 20:56:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x0) 20:56:58 executing program 4: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:56:58 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0x3}, 0x20) 20:56:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001200)={r1, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000012c0)=0x98) 20:56:58 executing program 2: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:56:59 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:56:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @multicast1}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 20:56:59 executing program 5: syz_usb_connect(0x0, 0x7b, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x2c, 0xa1, 0x5b, 0x8, 0x56c, 0x8100, 0x48ce, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd2, 0x0, 0x2, 0x35, 0x9b, 0xd6, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) [ 486.417136][ T30] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 486.657031][ T30] usb 6-1: Using ep0 maxpacket: 8 20:56:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001200)={r1, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000012c0)=0x98) [ 486.777713][ T30] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 486.786031][ T30] usb 6-1: config 0 has no interface number 0 [ 486.792460][ T30] usb 6-1: config 0 interface 210 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 486.802509][ T30] usb 6-1: config 0 interface 210 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 486.812649][ T30] usb 6-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice=48.ce [ 486.821863][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.869792][ T30] usb 6-1: config 0 descriptor?? [ 487.127381][ T30] cdc_subset: probe of 6-1:0.210 failed with error -71 [ 487.141131][ T30] usb 6-1: USB disconnect, device number 13 [ 487.237040][ T2915] Bluetooth: hci0: command 0x1003 tx timeout [ 487.243305][T13755] Bluetooth: hci0: sending frame failed (-49) [ 487.877025][ T2915] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 488.116971][ T2915] usb 6-1: Using ep0 maxpacket: 8 [ 488.237109][ T2915] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 488.245370][ T2915] usb 6-1: config 0 has no interface number 0 [ 488.251692][ T2915] usb 6-1: config 0 interface 210 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 488.261622][ T2915] usb 6-1: config 0 interface 210 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 488.271715][ T2915] usb 6-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice=48.ce [ 488.280927][ T2915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.290475][ T2915] usb 6-1: config 0 descriptor?? [ 488.547442][ T2915] cdc_subset: probe of 6-1:0.210 failed with error -71 [ 488.559129][ T2915] usb 6-1: USB disconnect, device number 14 [ 489.307029][ T2915] Bluetooth: hci0: command 0x1001 tx timeout [ 489.313262][T13755] Bluetooth: hci0: sending frame failed (-49) [ 491.387035][ T30] Bluetooth: hci0: command 0x1009 tx timeout 20:57:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) unshare(0x400) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 20:57:08 executing program 2: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:57:08 executing program 4: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:57:08 executing program 3: timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = gettid() recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0xfffffffffffffe29, &(0x7f0000003b00), 0x0, &(0x7f0000000180)=""/106, 0x6a}}], 0x400000000000116, 0x0, &(0x7f0000000040)={0x77359400}) r3 = dup(r1) write$FUSE_GETXATTR(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup3(r0, r3, 0x0) tkill(r2, 0x1004000000013) 20:57:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffbfffbfac, 0x0) 20:57:08 executing program 5: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000ec3ff4)) shutdown(r0, 0x2) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 20:57:08 executing program 1: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000028a18202505a1a440000102030109023b000101000000090400002002060000052406000005240000000d240f01000000000000000000020582020000000000090503020000000000d27950f5824d3aea57dd2966fe6acbdfbb164ee936c1d943ec3f00000000000000f844178e3150bfbf540dcaccff710b5100d17d9c289d924275c12e9339d8966214baad17cef41c2f1c961ad2973443062f4d4d3f4d7f41ca006d1bf38914f87a19d1acd211429db9d4a309d1427d8ef7"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_disconnect(r0) 20:57:09 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x80000042801, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000000)=0xfffffffffffffffd) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18}, 0x18) 20:57:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r4}}, 0x24}}, 0x0) [ 496.086693][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 20:57:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'bond0\x00\x00\x00\x00\x06\x00\x00\x01\x00', @ifru_settings={0x710000, 0x0, @fr_pvc=0x0}}) [ 496.163797][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 496.175500][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 496.227092][ T30] usb 2-1: new high-speed USB device number 19 using dummy_hcd 20:57:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'bond0\x00\x00\x00\x00\x06\x00\x00\x01\x00', @ifru_settings={0x710000, 0x0, @fr_pvc=0x0}}) 20:57:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'bond0\x00\x00\x00\x00\x06\x00\x00\x01\x00', @ifru_settings={0x710000, 0x0, @fr_pvc=0x0}}) 20:57:09 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'bond0\x00\x00\x00\x00\x06\x00\x00\x01\x00', @ifru_settings={0x710000, 0x0, @fr_pvc=0x0}}) [ 496.469233][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 496.587244][ T30] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 496.597849][ T30] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 496.609021][ T30] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 496.620098][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 32 20:57:09 executing program 4: unshare(0x400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = dup(r0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) 20:57:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) getsockname(r3, 0x0, 0x0) 20:57:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 20:57:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @local}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 20:57:09 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.controllers\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000000500)="07a6953a320f03388e2c1e94036d071e643daff1d081a7848e4e6c10740ede5b5a47809c88d40047ee33368a1a40983f0be5b2c7714a4d701a88261149", 0x3d}, 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x90a05}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 496.827332][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.836696][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.845042][ T30] usb 2-1: Product: syz [ 496.849469][ T30] usb 2-1: Manufacturer: syz [ 496.854161][ T30] usb 2-1: SerialNumber: syz [ 496.921488][ T30] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 497.128460][ T2915] usb 2-1: USB disconnect, device number 19 [ 498.107052][ T30] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 498.357055][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 498.477190][ T30] usb 2-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 498.487630][ T30] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 498.498527][ T30] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 498.510201][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 32 [ 498.677153][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.686668][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.695030][ T30] usb 2-1: Product: syz [ 498.699411][ T30] usb 2-1: Manufacturer: syz [ 498.704056][ T30] usb 2-1: SerialNumber: syz [ 498.748577][ T30] cdc_ether: probe of 2-1:1.0 failed with error -22 20:57:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0xdb) prctl$PR_SET_PTRACER(0x59616d61, r0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x792103b3a92b96) ioctl$EVIOCGABS0(r2, 0x80184540, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) [ 498.960598][ T30] usb 2-1: USB disconnect, device number 20 20:57:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) socket(0x10, 0x80002, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3]}) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 20:57:12 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) poll(&(0x7f0000000200)=[{r1}], 0x1, 0x0) 20:57:12 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@setlink={0x48, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, [{0x4}]}]}, 0x48}}, 0x0) 20:57:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5500000018007f5300fe01b2a4a280930a04000000a84308910000003900060008000c00010000000000156f757284366a660006000060000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000", 0x55}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 20:57:12 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffff9c}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) 20:57:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0xdb) prctl$PR_SET_PTRACER(0x59616d61, r0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x792103b3a92b96) ioctl$EVIOCGABS0(r2, 0x80184540, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) [ 499.054382][T16306] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 499.090119][T16310] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 499.098488][T16310] IPv6: Can't replace route, no match found 20:57:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@rand_addr="7af9143aa3bab6555d36b57f8649485f"}, 0x14) 20:57:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x6, &(0x7f0000000000)={@dev}, 0x3) 20:57:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[]], 0xdb) prctl$PR_SET_PTRACER(0x59616d61, r0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x792103b3a92b96) ioctl$EVIOCGABS0(r2, 0x80184540, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) 20:57:12 executing program 3: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x401, 0x0) r0 = socket(0x2, 0x3, 0x100000001) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='ip_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff45, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 20:57:12 executing program 0: unshare(0x2060000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00\x97\x93!l{\xb9\x80\x16\x97\xb8\x86\xae@\xd40xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) socket(0x10, 0x80002, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3]}) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 20:57:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x4b564d02}]}) [ 499.608629][T16343] IPVS: ftp: loaded support on port[0] = 21 [ 499.867483][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 499.873818][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:57:13 executing program 0: unshare(0x2060000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00\x97\x93!l{\xb9\x80\x16\x97\xb8\x86\xae@\xd40xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x7e) write(r1, &(0x7f0000000100)="200000001a000100000000000000a00080002000001943000000000000000023", 0x20) 20:57:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x18f}], 0x1, 0x0, 0x0, 0x1a8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x4db]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10001b00fa0000c52f0000"], 0xb}}], 0x1, 0x0) 20:57:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) socket(0x10, 0x80002, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3]}) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 500.109299][T16369] IPVS: ftp: loaded support on port[0] = 21 20:57:13 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000007f80)=@alg, 0x143, 0x0}}], 0x400000000000040, 0x10122, 0x0) [ 500.187639][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 500.194094][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:57:13 executing program 3: r0 = socket$kcm(0x2b, 0x10000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}, {0x2d, 'pids'}, {0x2d, 'rdma'}]}, 0x11) 20:57:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000240)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) socket(0x10, 0x80002, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r3]}) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 20:57:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000780)="c340", 0x2, 0x20000001, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0xde}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r0, r2) write$apparmor_exec(r3, &(0x7f00000002c0)={'exec ', 'nodevvmnet0%trustedselfnodev%eth1\x00'}, 0xffffff22) 20:57:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) timer_create(0x0, &(0x7f0000001500)={0x0, 0x2a, 0x4}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1) socket$isdn(0x22, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) 20:57:13 executing program 0: unshare(0x2060000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00\x97\x93!l{\xb9\x80\x16\x97\xb8\x86\xae@\xd40xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80044df9, 0x0) 20:57:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x79c4}) dup2(r0, r2) 20:57:14 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc51b, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) 20:57:14 executing program 1: unshare(0x600) r0 = socket$pptp(0x18, 0x1, 0x2) connect(r0, 0x0, 0x0) 20:57:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4020000000000725c12000000000000630b0000000000009500000000000000c6e7235683c0a8feed316ac7165e6edc0bcd992a5df44b8ea97893633076f9484973bc8aaf24a7ff7bee71f9a98735f971c81a0b368344ac039ded0d932b2f4b0716a18f8cdbd9f3f61dc870f084cafb33f2eae8cc10cf71b8ea2d15b968ee1739978c83855402c07064561da4323fe30d5dbc666f"], &(0x7f0000003ff6)='G\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x22) 20:57:14 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x13) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x18) 20:57:15 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 20:57:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) timer_create(0x0, &(0x7f0000001500)={0x0, 0x2a, 0x4}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1) socket$isdn(0x22, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) 20:57:15 executing program 1: unshare(0x600) r0 = socket$pptp(0x18, 0x1, 0x2) connect(r0, 0x0, 0x0) 20:57:15 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fa) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) [ 502.067229][ T30] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 502.337522][ T30] usb 5-1: Using ep0 maxpacket: 8 20:57:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000780)="c340", 0x2, 0x20000001, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r1 = gettid() recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1, 0x0, 0xde}}], 0x1, 0x0, 0x0) tkill(r1, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup2(r0, r2) write$apparmor_exec(r3, &(0x7f00000002c0)={'exec ', 'nodevvmnet0%trustedselfnodev%eth1\x00'}, 0xffffff22) 20:57:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000690200000000000002"]) [ 502.470601][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.481709][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 502.494781][ T30] usb 5-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.40 [ 502.504549][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.633091][ T30] usb 5-1: config 0 descriptor?? 20:57:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000690200000000000002"]) 20:57:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xfffffffffffffe24, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x19, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0xf5ffffff]}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) [ 503.131344][ T30] logitech-djreceiver 0003:046D:C51B.0004: unknown main item tag 0x0 [ 503.139738][ T30] logitech-djreceiver 0003:046D:C51B.0004: unknown main item tag 0x0 [ 503.148134][ T30] logitech-djreceiver 0003:046D:C51B.0004: unknown main item tag 0x0 [ 503.156452][ T30] logitech-djreceiver 0003:046D:C51B.0004: unknown main item tag 0x0 [ 503.164857][ T30] logitech-djreceiver 0003:046D:C51B.0004: unknown main item tag 0x0 [ 503.173162][ T30] logitech-djreceiver 0003:046D:C51B.0004: unknown main item tag 0x0 [ 503.330738][T11541] usb 5-1: USB disconnect, device number 14 [ 504.107148][T11541] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 504.347890][T11541] usb 5-1: Using ep0 maxpacket: 8 [ 504.467239][T11541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.478373][T11541] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 504.491509][T11541] usb 5-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.40 [ 504.500662][T11541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.510213][T11541] usb 5-1: config 0 descriptor?? [ 504.810552][T11541] logitech-djreceiver 0003:046D:C51B.0005: unknown main item tag 0x0 [ 504.819156][T11541] logitech-djreceiver 0003:046D:C51B.0005: unknown main item tag 0x0 [ 504.827584][T11541] logitech-djreceiver 0003:046D:C51B.0005: unknown main item tag 0x0 [ 504.835898][T11541] logitech-djreceiver 0003:046D:C51B.0005: unknown main item tag 0x0 [ 504.844491][T11541] logitech-djreceiver 0003:046D:C51B.0005: unknown main item tag 0x0 [ 504.852884][T11541] logitech-djreceiver 0003:046D:C51B.0005: unknown main item tag 0x0 20:57:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) 20:57:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000690200000000000002"]) 20:57:17 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 20:57:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) timer_create(0x0, &(0x7f0000001500)={0x0, 0x2a, 0x4}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1) socket$isdn(0x22, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) 20:57:17 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8) 20:57:17 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in=@local, @in=@broadcast}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}, 0x8}, 0x0) [ 504.873799][T11541] usb 5-1: USB disconnect, device number 15 20:57:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000690200000000000002"]) 20:57:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xfff1}}}, 0x24}}, 0x0) 20:57:18 executing program 4: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@llc={0x1a, 0xffffa888, 0x3, 0x0, 0x0, 0x0, @random="16b29a3288a8"}, 0x80, 0x0}, 0x0) 20:57:18 executing program 5: getpid() r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x708e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) 20:57:18 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 20:57:18 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x5, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 20:57:18 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000140)={0x0, 0x0, 0x3}) poll(&(0x7f0000000100)=[{}], 0xb8, 0x0) 20:57:18 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) r0 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 20:57:18 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 20:57:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x40000003, 0x1, 0xc0010000], [0xc1]}) 20:57:18 executing program 5: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) 20:57:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) 20:57:18 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 20:57:19 executing program 1: socket(0xc, 0x6, 0xc5) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffffffffffd, 0x0, 0xfffffffffffffdb7) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000840)='/dev/dlm-monitor\x00', 0x400, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) openat(r1, &(0x7f0000000380)='./file0\x00', 0x4040, 0x1c) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0xa002) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x342c82db, @empty, 0x7f}}}, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x4, 0xb2, 0x18, 0x40, 0x17e9, 0x8226, 0x8118, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) kcmp(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, r2) 20:57:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") getdents64(0xffffffffffffff9c, 0xfffffffffffffffd, 0x303) [ 506.105688][T16586] kvm [16585]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 20:57:19 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r2, 0xeb, '\x00r%', "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"}}, 0x110) setxattr$security_capability(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='security.capability\x00', &(0x7f0000000880)=@v2={0x2000000, [{0x100, 0x7f}, {0x200, 0x50}]}, 0x14, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) pkey_alloc(0x0, 0x1) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c0045003, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c0045003, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000d00)='/dev/audio#\x00', 0x119d, 0x2000) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f00000011c0)={"3f1c85b3165ce78f9f802044ee00005eb74b732c234f5f136d3c3bdf575a73510e080aeea120d00b73d406a3ae6949c8e333da25e47ed197dc8a41ac532361b67a24de0e973e400072f5646b2970558f210f563ca356583b2774e42e8fd9f9a00d253de5cb44b803b51ad2228e04be3f5d619d60ec062ac2c972abfeeed83a28db47b347122ed30848880a49ae090aae5a996f9d72d39d6de8353ae3b87381c3177ca43f4d363757e4b6efc2ffa51ad3c3df1c3e19df0020517b0c7382b7ac6822f34fa1bb787bbfc0ee2544ad10887a9e5a4e7a5f600aa431d0fdd631ee4c87486c1759e39c9540be2d40357f9518f0d44b07c63e9a09ea81ea275d31b4eb8ad83e5fdd4e0317b4769c37894d3b02c804f56a7d52eeb6240ec94d60546dcb26912ff964ada5545e6f9ac3836e83fdb68b02c91165f420be10da543ea462b4a75535dc8cf31670daf03aa92713c9ab51db939f4451c5fd717c883c098a621ccf1736559a238ca19730a67875ba650b48bc68d494e045c1c110c12c3fba8c48ff58b00902b7eff55f309d70fea6cec63dc4a593dc21743bf627557c7266da166ae23e77a9f571323bbdd1c11ad2286e804126b1c838be0a2e177beb02d7a660b4675f9afa6e38d713d349eb25af52dfac8b183e246a9cbf8b34c20d17aec86af8dd875eb7aced9782dd1c1c8452488166bc7819dde8c789a78095cd6572c1163329b7186dd05ff6da2d5cdb36f8732d2c6d5a30467df89ff58e6443ff27f8e43da41f525fd91466419d30ba33ff12475553da904a10c92a9f2ed5ce7e4152e091dcef210dbb436fbdf3443d8435c4a9cc55e779798b89e8d5994a461366e4c3ea6e6147b6a038549cf19d47eea9b8c0d31a8a6279e982a00ed36c86d0cf2db61a51c75676b5b05135961664dba904542c3232d5ed808987d2e97149c42108854062d6ab2a1b6274aeeb8bc0a5e2bb693879397a1bff4dad5aafa1ff50f3ccc97ca67f0c7c0cf1c2bf49ea9e7a0695e6be1505c0870099fba0857f47e3fde97abaf43f5f51523da407133e0cbc20b977c4924d24d08b495a80b818ffd4f8d30c98e261b767141f1f6e5d6f58cd0a8c95d91346f5314cd07f485539d05deda4db501fbcfcebbff9b760e3b3a8f010b0738397f29ab2c0e4b997119b07eb224c9a8fc26b3373e6a609e9cd6f0b4e145a43b4dce4b55fa8c42df1a81ba26e38204f820ab5c5c87ca23e5f72d0d3944e68acc7e0d9df9aa4565d62663efe9b5c75df510213ef101f3ee010a997f0f454cde4411c1ad8bc6ad56f610fea54093e5dacaa620fbec904f063780d93995d8ecc5960d401e605f018d3f13627944b08fe8a806ecfd39ea7a0e4de002817b9b5ff1586e47b14ecc1ceb2d280752a59064f953e6e1f077876f6f82c3ef67deeb2c4273f60871b81c58e33cc5d8fb0729637245a"}) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x7fff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=0x10d) unshare(0x40000000) 20:57:19 executing program 5: socket$inet6(0xa, 0x696afeb95ee97b88, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/psched\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0xd) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000080)) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0xffffffffffffff7a, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) rmdir(0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r4, 0x7fff) sendfile(r2, r4, 0x0, 0x8040fffffffd) [ 506.403442][T16603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 506.431679][T11541] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 506.498840][T16601] IPVS: ftp: loaded support on port[0] = 21 20:57:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) [ 506.804122][T11541] usb 2-1: config 0 has an invalid interface number: 224 but max is 0 [ 506.812621][T11541] usb 2-1: config 0 has no interface number 0 [ 506.819007][T11541] usb 2-1: New USB device found, idVendor=17e9, idProduct=8226, bcdDevice=81.18 [ 506.828407][T11541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.029456][T11541] usb 2-1: config 0 descriptor?? 20:57:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 20:57:20 executing program 0: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 20:57:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) [ 507.317606][T11541] udlfb 2-1:0.224: vendor descriptor not available (-71) [ 507.341067][T11541] usb 2-1: Read EDID byte 0 failed: -71 [ 507.367414][T11541] usb 2-1: Read EDID byte 0 failed: -71 20:57:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 507.393794][T11541] usb 2-1: Read EDID byte 0 failed: -71 [ 507.399859][T11541] usb 2-1: Unable to get valid EDID from device/display 20:57:20 executing program 5: socket$inet6(0xa, 0x696afeb95ee97b88, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/psched\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0xd) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000080)) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0xffffffffffffff7a, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) rmdir(0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r4, 0x7fff) sendfile(r2, r4, 0x0, 0x8040fffffffd) [ 507.536123][T16601] IPVS: ftp: loaded support on port[0] = 21 [ 507.575922][T11541] usb 2-1: submit urb error: -2 [ 507.586463][T11541] udlfb: probe of 2-1:0.224 failed with error -2 [ 507.667434][T11541] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 507.676242][T11541] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 507.711158][T11541] [drm:udl_init] *ERROR* Selecting channel failed [ 507.719328][T11541] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe 20:57:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xc}]}}}]}, 0x3c}}, 0x0) [ 507.805703][T11541] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 507.814701][T11541] [drm] Cannot find any crtc or sizes [ 507.820359][T11541] [drm:udl_submit_urb] *ERROR* usb_submit_urb error fffffffe 20:57:20 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) [ 507.873720][T16639] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 507.920851][T11541] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.224 on minor 2 [ 507.928831][T11541] [drm] Initialized udl on minor 2 [ 508.046085][T11541] usb 2-1: USB disconnect, device number 21 20:57:21 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:57:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) 20:57:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000200)=0xfffffcfe) 20:57:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xfffffcb5, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0x17, @ipv6=@ipv4={[0x4], [], @empty}}]}, 0x28}}, 0x0) 20:57:21 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="2001001000"}, 0x1c) 20:57:21 executing program 5: socket$inet6(0xa, 0x696afeb95ee97b88, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/psched\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0xd) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000080)) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0xffffffffffffff7a, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) rmdir(0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r4, 0x7fff) sendfile(r2, r4, 0x0, 0x8040fffffffd) [ 508.468298][T16658] netlink: 'syz-executor.3': attribute type 23 has an invalid length. 20:57:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) chown(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dcb50d5e0bcfe47bf070") getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x356, 0x0, 0x0, 0x0) 20:57:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000200)=0xfffffcfe) 20:57:21 executing program 1: mremap(&(0x7f0000428000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f00008d3000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00005e3000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 20:57:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="c3", 0x1, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="5c755bb00e32b5f3908b7a908fd86455b6c5cbf577253da3f8458f5d20999bd1a53ca41a5e6173ba85edbe85c4112fccd88794654d4aef715e8de74e2051a561831a59531222ab3c60dcd105449899d623725cde31fe75fc28140fb7babc5191d0657ef9c96df7b81c68f1885a76917a6229f02e7990ca9aacbc864447220c886b71495ead4b0008e14a87af261e70be95d65759dbe2b292b704c67993012152a0fadab652a610c199416c476358e8e577db9e5744b9e8ee2f3c4e248f0a3606", 0xc0, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="c3", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r4}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'cmac(twofish-generic)\x00'}}) [ 508.829694][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 508.838003][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:57:22 executing program 5: socket$inet6(0xa, 0x696afeb95ee97b88, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/psched\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0xd) getsockopt$netlink(r3, 0x10e, 0x0, 0x0, &(0x7f0000000080)) quotactl(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0xffffffffffffff7a, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000140)=0x4, 0x4) rmdir(0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) clock_adjtime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ftruncate(r4, 0x7fff) sendfile(r2, r4, 0x0, 0x8040fffffffd) 20:57:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000200)=0xfffffcfe) 20:57:22 executing program 2: r0 = memfd_create(&(0x7f0000000200)='\x00', 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000740)) getegid() fchown(r1, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0xe8) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001700)) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000cc0)={@loopback, @remote, @ipv4={[], [], @loopback}, 0xaa, 0x4, 0x52, 0x0, 0xfffffffffffff2fc, 0x1000080, r3}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@loopback, @in6=@empty}}, {{@in=@remote}, 0x0, @in=@remote}}, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)) getpgid(0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e23, 0x800, @local, 0x2}, {0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}, 0x80000000, [0x3f99, 0x0, 0x100000000, 0x7f, 0x2, 0x6, 0x3, 0x6]}, 0x5c) ioctl$TIOCLINUX2(r1, 0x541c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000004c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 20:57:22 executing program 4: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000040)={{}, {0x0, r0/1000+30000}}, 0x0) alarm(0x0) 20:57:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000200)=0xfffffcfe) 20:57:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r2, 0x0, 0x0) io_submit(r2, 0xc3, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="1000004006ffffffffff600000000000b22025285db74192e7576d9062ec6e2fa5733f8ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 20:57:22 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[@ANYBLOB="08000000000000000100000000000000e100000000000000", @ANYPTR, @ANYBLOB="02000000006cbc5b8ddc4840ec000000669e462782b842538f000000000000", @ANYPTR, @ANYBLOB="000000000000c6fe2e5306a32a30000001000000000000002c00000000000000", @ANYPTR, @ANYBLOB="000000faff000000000000000000007700000000000036cc00307fb8e405b30ae6c8eff6c35df68c46e028ff198fe49aaed103fd7b42f36f43225ebf019a5c5e27a7b7cbddfb66dcc51bfe866c871098dc7720110ea37b29c3b95155dc213eafa464b6a5d8cf940c87a29272a912e8c8e628411429ff3422b71099797300c7312b86"]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) 20:57:22 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x3}}, 0x10) 20:57:22 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffff7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x1f8}, &(0x7f00000000c0)={0x0, 0x2710}) 20:57:22 executing program 1: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x9) 20:57:22 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @dev}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) r1 = socket$kcm(0x10, 0x800000000002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e431d00000081fffffff08ef9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000001540), 0x24c, 0x0) 20:57:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000140)) 20:57:23 executing program 2: unshare(0x40600) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x20003) flock(r0, 0x0) 20:57:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=@updsa={0x140, 0x1a, 0x301, 0x0, 0x0, {{@in6=@ipv4={[], [], @loopback}, @in6=@ipv4={[], [], @remote}}, {@in6=@dev, 0x0, 0x33}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 20:57:23 executing program 1: bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 20:57:23 executing program 0: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x00', 0x14, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 20:57:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 20:57:23 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="aa08000000c89159004c3a"], 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x2, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}}}) 20:57:23 executing program 3: close(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xec, 0xb8, 0xa2, 0x20, 0x46d, 0x900, 0xe3ed, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x59, 0x6a, 0x1e}}]}}]}}, 0x0) 20:57:23 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x42, 0x45, 0x44, 0x10, 0xb592, 0x9da8, 0x3d44, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x35, 0x0, 0x2, 0x1, 0x3, 0x4e, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83}}]}}]}}]}}, 0x0) 20:57:23 executing program 1: clock_getres(0xfffffffffffffffb, 0x0) 20:57:23 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0x1, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14, 0xe, 'pfifo_head_drop\x00'}, {0x8}}]}, 0x40}}, 0x0) 20:57:23 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) [ 510.547347][T16770] netlink: 227 bytes leftover after parsing attributes in process `syz-executor.0'. 20:57:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x805c6103, 0x0) [ 510.603637][T16772] netlink: 'syz-executor.4': attribute type 14 has an invalid length. 20:57:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f000059dffc), &(0x7f0000000140)=0x273) [ 510.648360][T16774] netlink: 'syz-executor.4': attribute type 14 has an invalid length. 20:57:23 executing program 5: unshare(0x400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 20:57:23 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x5, 0x1f, 0x4, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, &(0x7f00000001c0), &(0x7f0000000180)=""/16}, 0x18) [ 510.709189][T16776] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 510.728052][ T2915] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 510.735954][T11541] usb 4-1: new high-speed USB device number 31 using dummy_hcd 20:57:23 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) pipe2(&(0x7f0000000080), 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180), 0xc, &(0x7f00000005c0)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfb]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000780)={0x0, 0x0, 0x4, 'queue0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0xa, 0x4000000000000800, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000040), &(0x7f0000000240)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000)='$', 0x0}, 0x20) 20:57:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x2000031a, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x2, 0xfd13, &(0x7f0000000240)=""/195}, 0x26) [ 510.967401][ T2915] usb 3-1: Using ep0 maxpacket: 16 [ 510.977621][T11541] usb 4-1: Using ep0 maxpacket: 32 [ 511.090713][ T2915] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 511.099508][ T2915] usb 3-1: config 0 has no interface number 0 [ 511.105787][ T2915] usb 3-1: New USB device found, idVendor=b592, idProduct=9da8, bcdDevice=3d.44 [ 511.115052][ T2915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.123446][T11541] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 511.131849][T11541] usb 4-1: config 0 has no interface number 0 [ 511.138271][T11541] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=e3.ed [ 511.147471][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.196477][T11541] usb 4-1: config 0 descriptor?? [ 511.213708][ T2915] usb 3-1: config 0 descriptor?? [ 511.273615][T11541] gspca_main: spca500-2.14.0 probing 046d:0900 [ 511.289765][ T2915] usb 3-1: MIDIStreaming interface descriptor not found [ 511.463994][ T30] usb 3-1: USB disconnect, device number 9 [ 511.478002][T11541] gspca_spca500: reg write: error -71 [ 511.517182][T11541] gspca_spca500: reg write: error -71 [ 511.537252][T11541] gspca_spca500: reg write: error -71 [ 511.558375][T11541] gspca_spca500: reg write: error -71 [ 511.579492][T11541] gspca_spca500: reg write: error -71 [ 511.598343][T11541] gspca_spca500: reg write: error -71 [ 511.617214][T11541] gspca_spca500: reg write: error -71 [ 511.637247][T11541] gspca_spca500: reg write: error -71 [ 511.657146][T11541] gspca_spca500: reg write: error -71 [ 511.679328][T11541] gspca_spca500: reg write: error -71 [ 511.697129][T11541] gspca_spca500: reg write: error -71 [ 511.727142][T11541] gspca_spca500: reg write: error -71 [ 511.747129][T11541] gspca_spca500: reg write: error -71 [ 511.767316][T11541] gspca_spca500: reg write: error -71 [ 511.776654][T11541] usb 4-1: USB disconnect, device number 31 [ 512.236954][ T5] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 512.336940][T11541] usb 4-1: new high-speed USB device number 32 using dummy_hcd 20:57:25 executing program 3: close(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xec, 0xb8, 0xa2, 0x20, 0x46d, 0x900, 0xe3ed, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x59, 0x6a, 0x1e}}]}}]}}, 0x0) [ 512.487006][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 512.607212][ T5] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 512.615447][ T5] usb 3-1: config 0 has no interface number 0 [ 512.621820][ T5] usb 3-1: New USB device found, idVendor=b592, idProduct=9da8, bcdDevice=3d.44 [ 512.631069][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.640734][ T5] usb 3-1: config 0 descriptor?? [ 512.692950][ T5] usb 3-1: MIDIStreaming interface descriptor not found [ 512.886955][T11541] usb 4-1: Using ep0 maxpacket: 32 [ 512.893852][ T30] usb 3-1: USB disconnect, device number 10 [ 513.007209][T11541] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 513.015497][T11541] usb 4-1: config 0 has no interface number 0 [ 513.021807][T11541] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=e3.ed [ 513.030933][T11541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.040467][T11541] usb 4-1: config 0 descriptor?? [ 513.081452][T11541] gspca_main: spca500-2.14.0 probing 046d:0900 [ 513.317100][T11541] gspca_spca500: reg write: error -71 20:57:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000003200010b0000e6ff00000000000000000c00020001000000160000000900000000000000553ec9878d4609f84cc79d4bdf769fcf7363c8a1908ae631f29e7f15b1a4f2f85513c869bd059b3b0cd6e3a9423c3aa8e0a83c429004ccbf47d6d09f91d94ec7db0586ba6b99782bb25fa428cb673465b152aa3e8d311bfd52dcd4ca7b6f2e842faac52559a0a78c29e7789074984e42bfef18fba3483e790b049b5c0ca3480e98b15da0121918a70de1493858fc0257ca09ecca8441e08ef6c4282c3c8a2f7e8c287875551992cc2abaa9fe8b1f67bb636347d2712cf6a386f8"], 0x20}}, 0x0) r1 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x42, 0x0) 20:57:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f0000000040)='./control\x00', 0x0) chmod(&(0x7f0000000180)='./control\x00', 0x9c32f69e6caa24eb) open(&(0x7f0000000140)='./control\x00', 0xc40beb2474df922a, 0x0) 20:57:26 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 20:57:26 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x42, 0x45, 0x44, 0x10, 0xb592, 0x9da8, 0x3d44, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x35, 0x0, 0x2, 0x1, 0x3, 0x4e, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83}}]}}]}}]}}, 0x0) 20:57:26 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00003b2000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000240)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 513.367135][T11541] gspca_spca500: reg write: error -71 [ 513.387252][T11541] gspca_spca500: reg write: error -71 [ 513.407161][T11541] gspca_spca500: reg write: error -71 [ 513.427207][T11541] gspca_spca500: reg write: error -71 [ 513.452374][T11541] gspca_spca500: reg write: error -71 [ 513.487788][T11541] gspca_spca500: reg write: error -71 [ 513.507430][T11541] gspca_spca500: reg write: error -71 [ 513.527636][T11541] gspca_spca500: reg write: error -71 [ 513.548417][T11541] gspca_spca500: reg write: error -71 20:57:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x215) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x2, {0x7, 0xd, 0x0, 0x201008}}, 0x50) 20:57:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24a, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="80a7ec467d96060cd9e61bd464d59430"}]}, 0xfffffd33}}, 0x8000051) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) [ 513.567396][T11541] gspca_spca500: reg write: error -71 20:57:26 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000080)=[{r1, 0x400e}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:57:26 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) [ 513.588284][T11541] gspca_spca500: reg write: error -71 [ 513.609500][T11541] gspca_spca500: reg write: error -71 [ 513.647068][T11541] gspca_spca500: reg write: error -71 [ 513.715978][T11541] usb 4-1: USB disconnect, device number 32 20:57:26 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000000100)='./control\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') [ 513.777562][ T2915] usb 3-1: new high-speed USB device number 11 using dummy_hcd 20:57:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00\xcf\xb8\xd7\x1bk\b\xfd{4\xad\xd2\x97\xbd\xb05\xbe\xe9\x82\xfe\v\xf6\xd1\xc8\x966YO\xc5\\t\xe4\xffjW\xf2E1\x19\xd7\xdc\xda\xe1\xfb\xfcb\xb5\x88\x91\xbew\x9dh\xe5\xfc\xe8\x87N\x1c') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:26 executing program 3: close(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xec, 0xb8, 0xa2, 0x20, 0x46d, 0x900, 0xe3ed, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x59, 0x6a, 0x1e}}]}}]}}, 0x0) [ 514.007324][ T30] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 514.041791][ T2915] usb 3-1: Using ep0 maxpacket: 16 20:57:27 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f0000001040), 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) io_setup(0x4, &(0x7f0000000100)=0x0) dup2(r0, 0xffffffffffffffff) io_submit(r1, 0x1, &(0x7f0000001680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 20:57:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @multicast1}}) [ 514.186280][ T2915] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 514.194671][ T2915] usb 3-1: config 0 has no interface number 0 [ 514.201017][ T2915] usb 3-1: New USB device found, idVendor=b592, idProduct=9da8, bcdDevice=3d.44 [ 514.210233][ T2915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.268992][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 514.297191][ T4896] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 514.348605][ T2915] usb 3-1: config 0 descriptor?? [ 514.399829][ T2915] usb 3-1: MIDIStreaming interface descriptor not found [ 514.447329][T16869] IPVS: ftp: loaded support on port[0] = 21 [ 514.513953][ T30] usb 2-1: config index 0 descriptor too short (expected 58986, got 36) [ 514.522581][ T30] usb 2-1: config 161 has too many interfaces: 201, using maximum allowed: 32 [ 514.531607][ T30] usb 2-1: config 161 has 1 interface, different from the descriptor's value: 201 [ 514.541318][ T30] usb 2-1: config 161 has no interface number 0 [ 514.547822][ T30] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9 [ 514.558787][ T30] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24 [ 514.568974][ T30] usb 2-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 514.578169][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:57:27 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RWRITE(r0, &(0x7f0000000280)={0xb}, 0x101b6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) select(0x40, &(0x7f00000005c0), &(0x7f0000000600)={0x3ff}, 0x0, 0x0) [ 514.718190][ T4896] usb 4-1: Using ep0 maxpacket: 32 [ 514.811131][T11541] usb 3-1: USB disconnect, device number 11 [ 514.938507][ T4896] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 514.946743][ T4896] usb 4-1: config 0 has no interface number 0 [ 514.953142][ T4896] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=e3.ed [ 514.962336][ T4896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.157048][ T4896] usb 4-1: config 0 descriptor?? [ 515.160438][T16885] IPVS: ftp: loaded support on port[0] = 21 [ 515.178426][ T30] usb 2-1: GET_CAPABILITIES returned ffffff80 [ 515.184655][ T30] usbtmc 2-1:161.8: can't read capabilities [ 515.203143][ T4896] gspca_main: spca500-2.14.0 probing 046d:0900 20:57:28 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x42, 0x45, 0x44, 0x10, 0xb592, 0x9da8, 0x3d44, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x35, 0x0, 0x2, 0x1, 0x3, 0x4e, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83}}]}}]}}]}}, 0x0) 20:57:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x2d5, 0x0, 0x8000001b}) [ 515.388507][ T2915] usb 2-1: USB disconnect, device number 23 [ 515.427374][ T4896] gspca_spca500: reg write: error -71 20:57:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24a, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="80a7ec467d96060cd9e61bd464d59430"}]}, 0xfffffd33}}, 0x8000051) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) 20:57:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24a, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="80a7ec467d96060cd9e61bd464d59430"}]}, 0xfffffd33}}, 0x8000051) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) [ 515.470569][ T4896] gspca_spca500: reg write: error -71 [ 515.500919][ T4896] gspca_spca500: reg write: error -71 [ 515.536760][ T4896] gspca_spca500: reg write: error -71 [ 515.565671][ T4896] gspca_spca500: reg write: error -71 [ 515.599824][ T4896] gspca_spca500: reg write: error -71 [ 515.625010][ T4896] gspca_spca500: reg write: error -71 [ 515.655526][ T4896] gspca_spca500: reg write: error -71 [ 515.677874][ T30] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 515.688079][ T4896] gspca_spca500: reg write: error -71 [ 515.708167][ T4896] gspca_spca500: reg write: error -71 [ 515.728710][ T4896] gspca_spca500: reg write: error -71 [ 515.747700][ T4896] gspca_spca500: reg write: error -71 [ 515.769552][ T4896] gspca_spca500: reg write: error -71 [ 515.792360][ T4896] gspca_spca500: reg write: error -71 [ 515.832629][ T4896] usb 4-1: USB disconnect, device number 33 [ 515.927357][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 516.059718][ T30] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 516.068084][ T30] usb 3-1: config 0 has no interface number 0 [ 516.074329][ T30] usb 3-1: New USB device found, idVendor=b592, idProduct=9da8, bcdDevice=3d.44 [ 516.083635][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.203590][ T2915] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 516.228000][ T30] usb 3-1: config 0 descriptor?? [ 516.273651][ T30] usb 3-1: MIDIStreaming interface descriptor not found [ 516.483306][ T2915] usb 2-1: Using ep0 maxpacket: 16 [ 516.484219][ T30] usb 3-1: USB disconnect, device number 12 [ 516.607210][ T2915] usb 2-1: config index 0 descriptor too short (expected 58986, got 36) [ 516.615709][ T2915] usb 2-1: config 161 has too many interfaces: 201, using maximum allowed: 32 [ 516.624940][ T2915] usb 2-1: config 161 has 1 interface, different from the descriptor's value: 201 [ 516.634354][ T2915] usb 2-1: config 161 has no interface number 0 [ 516.640957][ T2915] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9 [ 516.650991][ T2915] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24 [ 516.661221][ T2915] usb 2-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 516.670441][ T2915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:57:29 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000080)=[{r1, 0x400e}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:57:29 executing program 3: close(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xec, 0xb8, 0xa2, 0x20, 0x46d, 0x900, 0xe3ed, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x59, 0x6a, 0x1e}}]}}]}}, 0x0) 20:57:29 executing program 0: write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="5c02"], 0x2) pipe(&(0x7f0000000500)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24a, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="80a7ec467d96060cd9e61bd464d59430"}]}, 0xfffffd33}}, 0x8000051) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) 20:57:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24a, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="80a7ec467d96060cd9e61bd464d59430"}]}, 0xfffffd33}}, 0x8000051) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) [ 516.937328][ T2915] usb 2-1: usb_control_msg returned -71 [ 516.943754][ T2915] usbtmc 2-1:161.8: can't read capabilities [ 517.011663][ T2915] usb 2-1: USB disconnect, device number 24 20:57:30 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x42, 0x45, 0x44, 0x10, 0xb592, 0x9da8, 0x3d44, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x35, 0x0, 0x2, 0x1, 0x3, 0x4e, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0x83}}]}}]}}]}}, 0x0) [ 517.269184][ T30] usb 4-1: new high-speed USB device number 34 using dummy_hcd 20:57:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bc0b13c0000000000000000000000000000000000000000000000000000000000000000000300"/112], 0xb8}}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x5, 0x0, 0x0) [ 517.507618][ T4896] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 517.519516][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 517.519829][ T2915] usb 2-1: new high-speed USB device number 25 using dummy_hcd 20:57:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x1c, 0x41000000000013, 0xfffffffffffdfaeb, 0x0, 0x0, {0x33}, [@typed={0x8, 0x1, @uid}]}, 0x1c}, 0x1, 0x68}, 0x0) r1 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) [ 517.643046][ T30] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 517.651435][ T30] usb 4-1: config 0 has no interface number 0 [ 517.657740][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=e3.ed [ 517.668190][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.747137][ T4896] usb 3-1: Using ep0 maxpacket: 16 [ 517.785220][ T30] usb 4-1: config 0 descriptor?? [ 517.798511][ T2915] usb 2-1: Using ep0 maxpacket: 16 [ 517.831806][ T30] gspca_main: spca500-2.14.0 probing 046d:0900 [ 517.877701][ T4896] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 517.885935][ T4896] usb 3-1: config 0 has no interface number 0 [ 517.892386][ T4896] usb 3-1: New USB device found, idVendor=b592, idProduct=9da8, bcdDevice=3d.44 [ 517.901695][ T4896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:57:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24a, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="80a7ec467d96060cd9e61bd464d59430"}]}, 0xfffffd33}}, 0x8000051) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) [ 517.937349][ T2915] usb 2-1: config index 0 descriptor too short (expected 58986, got 36) [ 517.946054][ T2915] usb 2-1: config 161 has too many interfaces: 201, using maximum allowed: 32 [ 517.955118][ T2915] usb 2-1: config 161 has 1 interface, different from the descriptor's value: 201 [ 517.964540][ T2915] usb 2-1: config 161 has no interface number 0 [ 517.970989][ T2915] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9 [ 517.980987][ T2915] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24 [ 517.991638][ T2915] usb 2-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 517.997530][ T4896] usb 3-1: config 0 descriptor?? [ 518.000817][ T2915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.058046][ T30] gspca_spca500: reg write: error -71 20:57:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24a, 0x0, 0x0, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="80a7ec467d96060cd9e61bd464d59430"}]}, 0xfffffd33}}, 0x8000051) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) [ 518.099894][ T4896] usb 3-1: MIDIStreaming interface descriptor not found [ 518.109562][ T30] gspca_spca500: reg write: error -71 [ 518.139541][ T30] gspca_spca500: reg write: error -71 [ 518.193661][ T30] gspca_spca500: reg write: error -71 [ 518.220020][ T30] gspca_spca500: reg write: error -71 [ 518.260067][ T30] gspca_spca500: reg write: error -71 [ 518.321349][ T30] gspca_spca500: reg write: error -71 [ 518.341849][ T4896] usb 3-1: USB disconnect, device number 13 [ 518.368248][ T30] gspca_spca500: reg write: error -71 [ 518.389207][ T30] gspca_spca500: reg write: error -71 [ 518.413060][ T30] gspca_spca500: reg write: error -71 [ 518.438256][ T30] gspca_spca500: reg write: error -71 [ 518.443158][ T2915] usb 2-1: GET_CAPABILITIES returned ffffffe0 [ 518.449951][ T2915] usbtmc 2-1:161.8: can't read capabilities [ 518.469399][ T30] gspca_spca500: reg write: error -71 [ 518.488500][ T30] gspca_spca500: reg write: error -71 [ 518.513016][ T30] gspca_spca500: reg write: error -71 [ 518.605035][ T30] usb 4-1: USB disconnect, device number 34 20:57:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000000)="e67e0c9e15c60ff9a6886af27dfafeb58626938829d9181fc338dcd4e9d83dbc"}) [ 518.813234][ T4896] usb 2-1: USB disconnect, device number 25 20:57:32 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 519.197784][T16957] mmap: syz-executor.3 (16957) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 20:57:32 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000080)=[{r1, 0x400e}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:57:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000340)="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", 0x309, 0xfffffffffffffffd) keyctl$read(0x3, r1, 0x0, 0x1) 20:57:32 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1005, 0x0) ioctl$int_in(r0, 0x800000c0045002, 0xfffffffffffffffd) 20:57:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xa0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000840)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:57:32 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x3e, 0x0, 0x0) 20:57:32 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000580), 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000000180), 0x10c, 0x0) 20:57:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x3d, &(0x7f0000002240), &(0x7f0000000000)=0xfa100e85e19abfa) [ 519.897041][ T2915] usb 2-1: new high-speed USB device number 26 using dummy_hcd 20:57:33 executing program 0: rt_sigprocmask(0x3, &(0x7f0000000480)={0xffffffffffff0002}, 0x0, 0x8) gettid() r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x8) recvfrom$unix(r1, &(0x7f0000000180)=""/46, 0x2e, 0x40, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) recvfrom$unix(r1, &(0x7f00000007c0)=""/233, 0x24b, 0x20, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x6}, 0x8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x3, @empty}, 0x10) sendto$inet(r2, 0x0, 0x2f5, 0x200007fc, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) getpid() stat(0x0, 0x0) pipe2$9p(0x0, 0x0) lstat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) memfd_create(0x0, 0x0) fdatasync(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffc3f, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) lstat(0x0, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) sendto(r2, &(0x7f00000000c0)='J', 0xffffffffffffff71, 0x8845, 0x0, 0x2e3) shutdown(r2, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x80040000101, 0x0, 0x2f49b2819fbc7c26) 20:57:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xc0ffffff, 0xf}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0x44e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe64}, 0x48) 20:57:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4c) 20:57:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 520.148260][ T2915] usb 2-1: Using ep0 maxpacket: 16 20:57:33 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) [ 520.289507][ T2915] usb 2-1: config index 0 descriptor too short (expected 58986, got 36) [ 520.298051][ T2915] usb 2-1: config 161 has too many interfaces: 201, using maximum allowed: 32 [ 520.307150][ T2915] usb 2-1: config 161 has 1 interface, different from the descriptor's value: 201 [ 520.316464][ T2915] usb 2-1: config 161 has no interface number 0 [ 520.322896][ T2915] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9 [ 520.332878][ T2915] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24 [ 520.343330][ T2915] usb 2-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 520.352563][ T2915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.759294][ T2915] usb 2-1: GET_CAPABILITIES returned ffffffe0 [ 520.765485][ T2915] usbtmc 2-1:161.8: can't read capabilities [ 520.968727][ T2915] usb 2-1: USB disconnect, device number 26 20:57:34 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004d10c310ba45dc92ce050000000109026ae6c9a10000000904080002fe03000009050502090000000009058f1e1800000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000080)=[{r1, 0x400e}, {r1}], 0x2, 0x0, 0x0, 0x0) 20:57:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000240)={0x0, 0x7ff}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0, 0xfffffffffffffe4e}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 20:57:34 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x6, @raw_data="8cb9b36c5926b76a59567955bbe3e0a50830302cce790865fb8879e163fc2435a3fe3a0fc7ad700fcb2a081a31169fb37f2ed0a9fcf875a2916949f107c6d25b6d684341036ceca4a3a4aaac2f3258913260617920172ceed02a9c17378367ee9574f6314ea545aa5731a7fd95a50728bf31ed853d2b85bbecd8403146f6b80d68d0f63f1e7e90c0f56596bf184cff38397338206aa6de817d233f540363dba1bd6cf598a1af538ba810574f46257594a4ed1294f85984e869bd7601c3d336755a633006024fc993"}) 20:57:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x3d, &(0x7f0000002240), &(0x7f0000000000)=0xfa100e85e19abfa) [ 521.525055][T17014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 20:57:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000020a0001006e6574656d0000f91b0002000000000000000000b12c00"/54], 0x4c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0xe03f0300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:57:34 executing program 4: unshare(0x8000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000738fc0), &(0x7f0000356000)) 20:57:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 521.769882][T17033] netem: invalid attributes len -1 [ 521.775231][T17033] netem: change failed 20:57:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000020a0001006e6574656d0000f91b0002000000000000000000b12c00"/54], 0x4c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0xe03f0300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:57:35 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x42, 0x31, 0x91, 0x20, 0x424, 0x7800, 0x824e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x64, 0x0, 0x2, 0x34, 0xc5, 0xa1, 0x0, [], [{{0x9, 0x5, 0x8e}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) [ 521.899470][ T30] usb 2-1: new high-speed USB device number 27 using dummy_hcd 20:57:35 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) eventfd2(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) pselect6(0x40, &(0x7f0000000280)={0x5}, 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) [ 522.104600][T17047] netem: invalid attributes len -1 [ 522.110008][T17047] netem: change failed [ 522.148122][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 522.267576][ T30] usb 2-1: config index 0 descriptor too short (expected 58986, got 36) [ 522.276042][ T30] usb 2-1: config 161 has too many interfaces: 201, using maximum allowed: 32 [ 522.285198][ T30] usb 2-1: config 161 has 1 interface, different from the descriptor's value: 201 [ 522.295002][ T30] usb 2-1: config 161 has no interface number 0 [ 522.301443][ T30] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 9 [ 522.311439][ T30] usb 2-1: config 161 interface 8 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 24 [ 522.321635][ T30] usb 2-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 522.331000][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.407163][ T4896] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 522.597204][ T30] usb 2-1: GET_CAPABILITIES returned ffffffc0 [ 522.603364][ T30] usbtmc 2-1:161.8: can't read capabilities [ 522.657077][ T4896] usb 4-1: Using ep0 maxpacket: 32 [ 522.777089][ T4896] usb 4-1: config 0 has an invalid interface number: 100 but max is 0 [ 522.785479][ T4896] usb 4-1: config 0 has no interface number 0 [ 522.791848][ T4896] usb 4-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=82.4e [ 522.801162][ T4896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.811223][ T4896] usb 4-1: config 0 descriptor?? [ 522.818513][ T2915] usb 2-1: USB disconnect, device number 27 [ 522.849260][ T4896] lan78xx 4-1:0.100 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 522.860722][ T4896] lan78xx: probe of 4-1:0.100 failed with error -22 [ 523.050507][ T2915] usb 4-1: USB disconnect, device number 35 20:57:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000020a0001006e6574656d0000f91b0002000000000000000000b12c00"/54], 0x4c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0xe03f0300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:57:36 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) 20:57:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x3d, &(0x7f0000002240), &(0x7f0000000000)=0xfa100e85e19abfa) 20:57:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 523.402393][T17064] netem: invalid attributes len -1 [ 523.407986][T17064] netem: change failed 20:57:36 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c250f30882050300eef70000000109022400010000000009040200090033cb0009050112080000000009058c0b08000000000c40c8a32820aaf2f1c0bc93b09135d694d46a99023df703f2edd2591d9cdda8418ea687e52e30d568f5f2f913354ae888248ed0fa23b2f36d0000000001d36a4ad60ffd07d800000000000000cea3"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4400, 0x0) 20:57:36 executing program 4: arch_prctl$ARCH_GET_CPUID(0x1011) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x1950, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040), 0x4) sendto$inet6(r0, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) accept4(r0, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80, 0x80800) ioctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) sendto$inet6(r0, &(0x7f0000000000)="cc", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004600)=""/4096, 0xfffffffffffffe56}, 0x2000) 20:57:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000020a0001006e6574656d0000f91b0002000000000000000000b12c00"/54], 0x4c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0xe03f0300, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 523.596137][T17077] netem: invalid attributes len -1 [ 523.601637][T17077] netem: change failed 20:57:36 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000380)='/dev/capi20\x00', 0x0, 0x0) unshare(0x2000400) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 20:57:36 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@setlink={0x50, 0x13, 0x233, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, [{0x2c, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @random="ef657e6eba50"}}]}]}]}, 0x50}}, 0x0) [ 523.789993][ T4896] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 523.827841][ T30] usb 4-1: new high-speed USB device number 36 using dummy_hcd 20:57:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001c40)={0x0, @rand_addr, 0x0, 0x0, 'lblcr\xef]\x86\x10o\xb1>\x88\xd0yr'}, 0x2c) [ 524.068344][ T4896] usb 2-1: Using ep0 maxpacket: 8 [ 524.111822][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 524.197289][ T4896] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 524.205653][ T4896] usb 2-1: config 0 has no interface number 0 [ 524.212026][ T4896] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 524.221846][ T4896] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 524.233009][ T4896] usb 2-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 524.246080][ T4896] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 524.255322][ T4896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.297500][ T30] usb 4-1: config 0 has an invalid interface number: 100 but max is 0 [ 524.305890][ T30] usb 4-1: config 0 has no interface number 0 [ 524.312237][ T30] usb 4-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=82.4e [ 524.321440][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.345460][ T30] usb 4-1: config 0 descriptor?? [ 524.362107][ T4896] usb 2-1: config 0 descriptor?? [ 524.391055][ T30] lan78xx 4-1:0.100 (unnamed net_device) (uninitialized): lan78xx_get_endpoints failed: -22 [ 524.401989][ T30] lan78xx: probe of 4-1:0.100 failed with error -22 [ 524.590756][ T2915] usb 4-1: USB disconnect, device number 36 [ 524.770102][ T5] usb 2-1: USB disconnect, device number 28 20:57:38 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 20:57:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup2(r0, r2) dup2(r0, r1) 20:57:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x3d, &(0x7f0000002240), &(0x7f0000000000)=0xfa100e85e19abfa) 20:57:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa}, 0x3c) 20:57:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:38 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00000cd000/0x1000)=nil, 0x3) [ 525.567509][ T5] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 525.806922][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 525.929665][ T5] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 525.937952][ T5] usb 2-1: config 0 has no interface number 0 [ 525.944206][ T5] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 525.954204][ T5] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 525.965405][ T5] usb 2-1: config 0 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 525.978521][ T5] usb 2-1: New USB device found, idVendor=0582, idProduct=0003, bcdDevice=f7.ee [ 525.987780][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.018672][ T5] usb 2-1: config 0 descriptor?? [ 526.306238][ T5] usb 2-1: USB disconnect, device number 29 20:57:39 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x55}, [@ldst={0xa, 0x0, 0x3, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 20:57:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 20:57:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x800000000a, &(0x7f00007e0000)=""/4, &(0x7f0000000040)=0xdf) 20:57:39 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 20:57:39 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, &(0x7f0000000000)="f4b5fde3", 0x4) 20:57:39 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000efff000000002100000000000100000000000002000100010000000000000200fd000005009a0500000000000a004872bbb689620900005578506122026df2ea6b830358f92ae7d50d7ace"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x5b2, 0x0) 20:57:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={0x0, 0xad, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x19, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, [@TIPC_NLA_PROP_MTU, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_MTU]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) 20:57:39 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0xeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @initdev}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}, 0x5c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10002, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff020000ff000008004500005c82d9470600019078acac141411050290782100060040210000ac14140dac141400082c436a00000000000000009712e8712a17dd9c7028a5cff59445d57ff9950c6e0031ee4618da4400000200000000e0000001000000770000010000000000000000d6972415cf5fc545cdf1571eca90df09d4f589260a944652529d0a000042e9c133b132ad04ea3644af39c8f1341cd9a75a76bdd81ac83ff30d3f0bf84d000000"], 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000200)={0x2a, 0x3, 0x0, {0x5, 0x9, 0x0, '][-+em0/\''}}, 0x2a) write$UHID_INPUT(r2, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e23}, 0x6e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000001c0)={0x1, 0x7e, 0x0, 0x6}, 0x10) socket$inet6(0xa, 0x9, 0x7fc) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)) socket(0x11, 0x3, 0x8) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1005, 0x0) 20:57:39 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x6, 0xd, 0x0, 0x0) 20:57:39 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, &(0x7f0000000000)="f4b5fde3", 0x4) 20:57:39 executing program 5: syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @random="8b1bac7f727b", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x10, 0xffffff88, 0x0, @remote, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) [ 526.752631][T17148] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 20:57:39 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[], 0x52bb3c6e}) writev(r0, &(0x7f00000000c0), 0x10000000000001a9) [ 526.844935][T17156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 20:57:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, &(0x7f0000000000)="f4b5fde3", 0x4) 20:57:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x18, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8, 0x13, 0x1}, @IFLA_GRE_OFLAGS={0x8}]]}}}]}, 0x44}}, 0x0) 20:57:40 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x6, 0xd, 0x0, 0x0) 20:57:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_VLAN_DEFAULT_PVID={0x8, 0x27, 0x100}, @IFLA_BR_MCAST_MLD_VERSION={0x8}]}}}]}, 0x44}}, 0x0) 20:57:40 executing program 0: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x3) 20:57:40 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x4, &(0x7f0000000000)="f4b5fde3", 0x4) [ 527.121439][T17177] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 527.130051][T17177] netlink: 'syz-executor.1': attribute type 44 has an invalid length. 20:57:40 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x6, 0xd, 0x0, 0x0) [ 527.354997][T17178] netlink: 'syz-executor.5': attribute type 19 has an invalid length. [ 527.363704][T17178] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 20:57:40 executing program 3: process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x445}], 0x1, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/231, 0xffffffab}], 0x1, 0x0) 20:57:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_FLAGS={0x8}, @IFLA_GRE_ENCAP_TYPE={0x8}]]}}}]}, 0x48}}, 0x0) 20:57:40 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x6, 0xd, 0x0, 0x0) 20:57:40 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000077023020a50600d854b6000000010902120401810000000904570000ca2d2d00"], 0x0) syz_usb_ep_read(r0, 0x0, 0x13, &(0x7f00000001c0)=""/19) 20:57:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x1, 0x402, 0x1}, 0x2c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x73fffb, 0x0, 0x20820000, r0}, 0x2c) 20:57:40 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0x8) [ 527.588230][T17203] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 527.596574][T17203] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 20:57:40 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8007ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x16, 0x821, 0x0, 0x0, {0xa}}, 0x3b}}, 0x0) 20:57:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f00000002c0)=[@acquire, @release, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 527.660005][T17210] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 527.668513][T17210] netlink: 'syz-executor.0': attribute type 14 has an invalid length. 20:57:40 executing program 4: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) [ 527.753480][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:57:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001300090468fe0700000000000000ff3f03000000450001070000001419001900000a00005d14a4e91ee438d2fdf201000000004012", 0x39}], 0x1) [ 527.796604][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:57:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) close(r1) 20:57:40 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x7}}) 20:57:40 executing program 4: mmap(&(0x7f000053d000/0x4000)=nil, 0x4000, 0x1000003, 0x2871, 0xffffffffffffffff, 0x0) mremap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000053b000/0x3000)=nil) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) [ 527.878006][ T5] usb 6-1: new high-speed USB device number 15 using dummy_hcd 20:57:41 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1, @pix_mp}) [ 527.992042][T17232] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.1'. 20:57:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000002380)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local}, @icmp=@parameter_prob={0x8, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) [ 528.127246][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 528.267231][ T5] usb 6-1: config index 0 descriptor too short (expected 1042, got 18) [ 528.275747][ T5] usb 6-1: config 129 has an invalid interface number: 87 but max is 0 [ 528.284577][ T5] usb 6-1: config 129 has no interface number 0 [ 528.291050][ T5] usb 6-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 528.300322][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.381517][ T5] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 528.597108][ T5] gspca_nw80x: reg_w err -71 [ 528.602000][ T5] nw80x: probe of 6-1:129.87 failed with error -71 [ 528.611041][ T5] usb 6-1: USB disconnect, device number 15 [ 529.356956][ T5] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 529.637425][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 529.767462][ T5] usb 6-1: config index 0 descriptor too short (expected 1042, got 18) [ 529.776210][ T5] usb 6-1: config 129 has an invalid interface number: 87 but max is 0 [ 529.785171][ T5] usb 6-1: config 129 has no interface number 0 [ 529.791963][ T5] usb 6-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 529.803706][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.861472][ T5] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 530.067698][ T5] gspca_nw80x: reg_w err -71 [ 530.072912][ T5] nw80x: probe of 6-1:129.87 failed with error -71 [ 530.082442][ T5] usb 6-1: USB disconnect, device number 16 20:57:43 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000077023020a50600d854b6000000010902120401810000000904570000ca2d2d00"], 0x0) syz_usb_ep_read(r0, 0x0, 0x13, &(0x7f00000001c0)=""/19) 20:57:43 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x2082, 0x2}) 20:57:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000002400070500000021002000002433036f", @ANYRES32=r3, @ANYBLOB="00000000f1ffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@gettclass={0x24, 0x25, 0x52d, 0x0, 0x0, {0x0, r3, {0x0, 0xfff3}}}, 0x24}}, 0x0) 20:57:43 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x17, 0x710000, 0x0) 20:57:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_SECUREBITS(0x1b) 20:57:43 executing program 1: unshare(0x20040600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) 20:57:43 executing program 2: unshare(0x8000400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x3, 0x3b, 0x0, 0xffffffffffffff9c}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 20:57:43 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001480)={0x2, @pix_mp={0x0, 0x0, 0x50424752}}) 20:57:43 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @empty=0x2000000, @remote, @dev={0xac, 0x14, 0x14, 0x6}}}}}, 0x0) 20:57:43 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) mkdir(0x0, 0x20) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x43, 0x0, 0x7) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@empty, @empty}, &(0x7f0000000100)=0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x65fa, 0x0, 0x0, 0xf9}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000080)={r4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 20:57:43 executing program 1: unshare(0x20040600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) 20:57:44 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, 0x0) chdir(&(0x7f0000000580)='./file0\x00') r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) [ 530.927717][ T5] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 531.167587][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 531.289730][ T5] usb 6-1: config index 0 descriptor too short (expected 1042, got 18) [ 531.298217][ T5] usb 6-1: config 129 has an invalid interface number: 87 but max is 0 [ 531.306561][ T5] usb 6-1: config 129 has no interface number 0 [ 531.314734][ T5] usb 6-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 531.324012][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.371831][ T5] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 531.587173][ T5] gspca_nw80x: reg_w err -71 [ 531.592170][ T5] nw80x: probe of 6-1:129.87 failed with error -71 [ 531.601576][ T5] usb 6-1: USB disconnect, device number 17 20:57:45 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000077023020a50600d854b6000000010902120401810000000904570000ca2d2d00"], 0x0) syz_usb_ep_read(r0, 0x0, 0x13, &(0x7f00000001c0)=""/19) 20:57:45 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @empty=0x2000000, @remote, @dev={0xac, 0x14, 0x14, 0x6}}}}}, 0x0) 20:57:45 executing program 1: unshare(0x20040600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) 20:57:45 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 20:57:45 executing program 4: unshare(0x400) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0xa000002272, &(0x7f0000fd3ffc)) 20:57:45 executing program 0: sendmsg$alg(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18}], 0x18}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind(r0, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000001240)={0x2, 0x0, @dev}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000000c0), 0x10) 20:57:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000005002000002000000000000002a"]) 20:57:45 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @empty=0x2000000, @remote, @dev={0xac, 0x14, 0x14, 0x6}}}}}, 0x0) 20:57:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup2(r0, r0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000040)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000002000000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 20:57:45 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010000500d25a80648c63940d0324fc00100002400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 20:57:45 executing program 1: unshare(0x20040600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) [ 532.384494][T17323] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 20:57:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") clone(0x400000, 0x0, 0x0, 0x0, 0x0) [ 532.447111][ T30] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 532.648452][T17332] debugfs: Directory '17332-4' with parent 'kvm' already present! [ 532.687614][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 532.807086][ T30] usb 6-1: config index 0 descriptor too short (expected 1042, got 18) [ 532.815679][ T30] usb 6-1: config 129 has an invalid interface number: 87 but max is 0 [ 532.824201][ T30] usb 6-1: config 129 has no interface number 0 [ 532.830593][ T30] usb 6-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 532.839811][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.891236][ T30] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 533.097856][ T30] gspca_nw80x: reg_w err -71 [ 533.102624][ T30] nw80x: probe of 6-1:129.87 failed with error -71 [ 533.111614][ T30] usb 6-1: USB disconnect, device number 18 20:57:46 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="1201000077023020a50600d854b6000000010902120401810000000904570000ca2d2d00"], 0x0) syz_usb_ep_read(r0, 0x0, 0x13, &(0x7f00000001c0)=""/19) 20:57:46 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x240, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x80047c05, r1) 20:57:46 executing program 3: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @empty=0x2000000, @remote, @dev={0xac, 0x14, 0x14, 0x6}}}}}, 0x0) 20:57:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:57:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000005002000002000000000000002a"]) 20:57:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000007280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 20:57:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x0, 0x0}) 20:57:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r2, &(0x7f0000007080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) 20:57:46 executing program 2: set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x4, 0x2}) 20:57:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000005002000002000000000000002a"]) 20:57:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000007280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 20:57:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bind$alg(r1, 0x0, 0x0) [ 534.047268][ T5] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 534.297017][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 534.437164][ T5] usb 6-1: config index 0 descriptor too short (expected 1042, got 18) [ 534.445703][ T5] usb 6-1: config 129 has an invalid interface number: 87 but max is 0 [ 534.454226][ T5] usb 6-1: config 129 has no interface number 0 [ 534.460642][ T5] usb 6-1: New USB device found, idVendor=06a5, idProduct=d800, bcdDevice=b6.54 [ 534.469891][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.521338][ T5] gspca_main: nw80x-2.14.0 probing 06a5:d800 [ 534.727170][ T5] gspca_nw80x: reg_w err -71 [ 534.732067][ T5] nw80x: probe of 6-1:129.87 failed with error -71 [ 534.741328][ T5] usb 6-1: USB disconnect, device number 19 20:57:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x100000000d415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9237e4a6c98c0100000400000000643b3441ba01b983513cde91a1f98937702dcc34044c8e248e3f5c2a01000000000000a4f88486a9cebcf2e7cdd1d1d0123e8275dd4b2691680dc38b518cdf620300edbb78b75594140104dcb4357df02d2eedae61c72000007e02000400710e13"], 0x6f) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) 20:57:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r2, &(0x7f0000007080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) 20:57:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000005002000002000000000000002a"]) 20:57:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000007280)=ANY=[@ANYBLOB="140000004200053127d8010080000000000400000072e6c04000016ed7b2063c2e5df444b1d69598368135e22adfff66954ea956b60300000000000000dd7ea2921c1e3b35e6b8407c13389947b2ea420101dfee3122981b471b674ba2b8e6e58022891fb9b85a2216fccfff61a3d1bc29cff0bca99a238de2deaf699e19b03b42bba6dd6509737d65b5e909451f20f3c68aaa68fe2553ef76e41f03abb15ca57d2c3f0f0435b3bb7738d93ec2dd9116f889cba8bb3835ca4ab6cfbcad4a44fbb22821f5a2d706ffea6c7aa57bb236837541cb54c1eb40fb7d19638d9411195e1e4787775926ce432fe23b9ac29e5d87d253d74eca3f58048e26af3878788efe9c89c7c9e509b66243e6210100cba3ada5b490746b1ce5f3bdde23d10fc60a83903242de26a2ae2a0b55361e67221f000000000000004d473cf341fe44f6947420d8399066a4efd865a48174d5a7e8050ce5d625038ae7d9027be5fc27fac7282566055964bff527e756df553f135660d6c9acf462b3da3fb544f9a600000000dd30f35b20d9df16ff3979ab7ea870f7743c2931b907e4c693a42204a98f1296c162e31b23f3b75bfb0ae5fccffef7e0b474d804f67b3e521918f018dc44a505ec46559cb89d8df25cbd86ac939229c2f1cbdce8df0fcb0000cdd6d83c981b0c31e761e45144c41d6a334d827c7feb88319bf7e269958501645a3e720b0f2fc465211f86c5c808ea8ec3f79f716031f2cbb56418aab49fbf0000000000000000000000000000000000000000aeb7cc21fddce7ba0424dabd6cb9d1240ece7f217613f9115001847199ef14df225f00000000000000000000000000000000000000000000000000000000001a6f47046d4e07b05e4a62c2f67f4b5ca9d26f5f1e94b329f1daac2953ba74ad2386fdadec71c8ccae88e229021ca92f31a43ef2bc7fbe8d6b7bd3d3308713e59c36a3ccf2085429a91eef8a377510cd2371a90dd36d709b70e36707f2499000fe4c09dada8f3d9a4980a514976643c7a95b92ff25893d84a97b3c77eebcec7a2c0107f28b452adf8c060f6f71a2128df886bd39ab2d8e28c95051519fb28885a6c4daf321f54032dac23c11bbbc271a4d14242e42b009f9a530183787d5d8273668df7720c30931a0cd40f69f5ebbec2a1fa49f4c1792924b1c1500912885f2776b4b55541feec508f241c6f59bc1484dab66b8cdc496e34a99a18213872164cb729f5642dc80a6a597e8a96999e39a497082f9b413283de0c307eba4b72f128f7833b7a4a3a76b0272692d7f895f7f560238fec2525efc0b80be51cfa07cfc52a9ea8a7cb62ebc36641a2c5808f76d7174eb50910cd4cca2fa99f0cd4ca2f93a9a7765b65d218043acb54ba6223fb51cfa644a2a4a"], 0x14}}, 0x0) 20:57:48 executing program 3: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003600)='tunl0\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080)="313131d918d8e0be04c91a9e8150eff679d12d4a0ccf6c3ed849c4ec5142a2bf", 0x20, 0x0, &(0x7f00000001c0), 0x10) 20:57:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") mkdir(&(0x7f0000000100)='./control\x00', 0x0) r1 = inotify_init() r2 = open(&(0x7f0000000080)='./control\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./control\x00', r2, &(0x7f0000000340)='./file0\x00') mknodat(r2, &(0x7f00000001c0)='./control\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x40) renameat2(r2, &(0x7f0000000040)='./control\x00', r2, &(0x7f0000036000)='./file0\x00', 0x2) 20:57:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r2, &(0x7f0000007080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) 20:57:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x100000000d415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9237e4a6c98c0100000400000000643b3441ba01b983513cde91a1f98937702dcc34044c8e248e3f5c2a01000000000000a4f88486a9cebcf2e7cdd1d1d0123e8275dd4b2691680dc38b518cdf620300edbb78b75594140104dcb4357df02d2eedae61c72000007e02000400710e13"], 0x6f) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) 20:57:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket(0x10, 0x4000000000002, 0x0) ioctl$sock_ifreq(r1, 0x89fa, &(0x7f0000000100)={'sit0\x00\x1f\x80\x12\x00\x00\x01\xe0\x00\x00\x0e\x02', @ifru_ivalue=0x907000}) 20:57:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000580)=""/252, 0xfc}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/112, 0x70}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000007280)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 20:57:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) unshare(0x60400) ioctl$KDGKBLED(r0, 0xc0045405, 0x0) 20:57:48 executing program 5: unshare(0x400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000000)) 20:57:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r2, &(0x7f0000007080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) 20:57:48 executing program 4: r0 = socket(0xa, 0x802, 0x88) sendmsg$inet6(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)="1986bfbaaaef692d10086e5f77139a5e0b2ebdaccb11e1a049", 0x19}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0xfffffffffffffe15, 0x0}}], 0x183, 0x0, 0x0) 20:57:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x100000000d415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9237e4a6c98c0100000400000000643b3441ba01b983513cde91a1f98937702dcc34044c8e248e3f5c2a01000000000000a4f88486a9cebcf2e7cdd1d1d0123e8275dd4b2691680dc38b518cdf620300edbb78b75594140104dcb4357df02d2eedae61c72000007e02000400710e13"], 0x6f) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) 20:57:48 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="5500000018007f5f00fe01b2a4a290930214040200000001020009003900090035020c141100000019000b4023dc0b00000022dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 20:57:48 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2b, 0x19, 0x91, 0x10, 0x1d50, 0x60c6, 0x1ad7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x1, 0xc9, 0xb3, 0xea, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2, 0x49}}]}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0xac, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x82, 0x1, "f1"}, 0x0, &(0x7f0000000440)={0x20, 0x84, 0x1, 'A'}, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, &(0x7f0000000580)={0x40, 0x9, 0x1}, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000780)={0x40, 0x1e, 0x1}, 0x0}) 20:57:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) 20:57:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4", 0xb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:57:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x100000000d415, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x100000001}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="9237e4a6c98c0100000400000000643b3441ba01b983513cde91a1f98937702dcc34044c8e248e3f5c2a01000000000000a4f88486a9cebcf2e7cdd1d1d0123e8275dd4b2691680dc38b518cdf620300edbb78b75594140104dcb4357df02d2eedae61c72000007e02000400710e13"], 0x6f) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)) 20:57:49 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0x17c, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000002c0)={0x6}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000540)=ANY=[@ANYBLOB="f50247"]) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x81c6}}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000780)=""/4096, 0x6, 0x0, 0xffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:57:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$KVM_SET_SREGS(r2, 0xc008aec1, &(0x7f0000000140)={{0x7}}) dup2(r3, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 20:57:49 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x301, 0x0) ioctl$int_in(r0, 0x80000080045010, 0x0) 20:57:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4", 0xb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:57:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) [ 536.281161][ T5] usb 2-1: new high-speed USB device number 30 using dummy_hcd 20:57:49 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) shutdown(r0, 0x3) 20:57:49 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 20:57:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4", 0xb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 536.547043][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 536.687810][ T5] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 536.696086][ T5] usb 2-1: config 0 has no interface number 0 [ 536.702687][ T5] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 73 [ 536.712807][ T5] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=1a.d7 [ 536.722023][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.781566][ T5] usb 2-1: config 0 descriptor?? [ 536.877251][T17490] hwrng: no data available [ 537.030729][ T30] usb 2-1: USB disconnect, device number 30 20:57:52 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000d12ffc)) 20:57:52 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r1, &(0x7f0000001240), 0x1000) sendfile(r0, r1, &(0x7f00000000c0), 0x5) sendfile(r0, r1, 0x0, 0x10001) 20:57:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 20:57:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x3}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000c40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 20:57:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = socket$packet(0x11, 0x3, 0x300) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x20000000001, &(0x7f00000000c0)=0x3, 0x3a) close(r1) 20:57:52 executing program 2: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1}, @tcp={{0x0, 0x4e20, 0x41424344, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 20:57:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$can_raw(r1, &(0x7f00000001c0), 0xaa) [ 539.290909][T17504] bridge0: port 3(gretap0) entered blocking state [ 539.298717][T17504] bridge0: port 3(gretap0) entered disabled state [ 539.321878][T17504] device gretap0 entered promiscuous mode [ 539.333965][T17504] bridge0: port 3(gretap0) entered blocking state 20:57:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x2, [{0x40000082}]}) [ 539.340823][T17504] bridge0: port 3(gretap0) entered forwarding state 20:57:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$can_raw(r1, &(0x7f00000001c0), 0xaa) 20:57:52 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x1000000000000c, &(0x7f0000000140)=0x10e11, 0x4) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400}) 20:57:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6653070000003639405cb4", 0xb}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 20:57:52 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 20:57:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x20, &(0x7f0000000000)=0x0) eventfd2(0x80000000, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x80, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x2001) pipe(&(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write(r3, &(0x7f00000005c0)="335872de67ecbb23fc6eefaddbcd6a3dbd02e94ce8e20c4b9d0474688ee58cd9a8", 0xfffffffffffffefe) openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x400, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) io_submit(r2, 0x2, &(0x7f0000000580)=[0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000480)="732ccf5c0a57ce3d52a1620fb1dc32b20c2693ce706a4a1ddf373a0cb7a449a3eb02ff57bd44fc34e639f31ae2878c7c63f9e697ef77b18c3a912681aaf6ded124565f7f6c488f591661b655b41b120b51f6e82238ea0c48f66df3952642fb5ed97488252f5dd2fad07ce7a3c7896f04fbae02cc900fcff7682b4f80606d1ce8a66990935c566e", 0x87, 0x9e, 0x0, 0x2, r0}]) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x4, 0x12c) 20:57:52 executing program 2: unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) 20:57:52 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$can_raw(r1, &(0x7f00000001c0), 0xaa) 20:57:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$can_raw(r1, &(0x7f00000001c0), 0xaa) [ 540.055388][T17554] bridge0: port 3(gretap0) entered blocking state [ 540.063506][T17554] bridge0: port 3(gretap0) entered disabled state [ 540.085217][T17554] device gretap0 entered promiscuous mode [ 540.099127][T17554] bridge0: port 3(gretap0) entered blocking state 20:57:53 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) [ 540.106452][T17554] bridge0: port 3(gretap0) entered forwarding state 20:57:53 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) [ 540.221590][T17561] bridge0: port 3(gretap0) entered blocking state [ 540.231423][T17561] bridge0: port 3(gretap0) entered disabled state [ 540.253470][T17561] device gretap0 entered promiscuous mode [ 540.267283][T17561] bridge0: port 3(gretap0) entered blocking state [ 540.275200][T17561] bridge0: port 3(gretap0) entered forwarding state 20:57:53 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 20:57:53 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0xc0044d03, &(0x7f0000000080)) [ 540.594070][T17576] bridge0: port 3(gretap0) entered blocking state [ 540.603037][T17576] bridge0: port 3(gretap0) entered disabled state [ 540.633268][T17576] device gretap0 entered promiscuous mode 20:57:53 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0xe) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xbc0f, &(0x7f000000a000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 20:57:53 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:53 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) [ 540.646052][T17576] bridge0: port 3(gretap0) entered blocking state [ 540.653787][T17576] bridge0: port 3(gretap0) entered forwarding state 20:57:53 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:53 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 20:57:53 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0xe) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xbc0f, &(0x7f000000a000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 20:57:54 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:54 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0xe) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xbc0f, &(0x7f000000a000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 20:57:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) close(r0) 20:57:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x2a000400) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) munmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000) unshare(0x8000400) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 20:57:54 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:54 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0xe21}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0xe) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0xbc0f, &(0x7f000000a000)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 20:57:54 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000680)='hug\x04_bytes\x00zg\xfd\x03E\x18\xf0\xfc\xed\x8f\xfern\x01\xe2\x9d\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r3, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r11 = fcntl$dupfd(r8, 0x406, r9) ioctl$RTC_WKALM_RD(r11, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r12 = memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r13 = dup3(r2, r12, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x10001, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xf392}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002000290f00000000000000000200000000000000000000000400000008000100ac1414bb3743c8ce3416c81b7f83bb9d104eae802a95902a0ecfea5da9c15f84914f49b8f06cb9d13e706908881dfc69573cac62a3bbaaa9f0bc0124e9b06981359d66"], 0x28}}, 0x0) sendmsg$key(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES32=r5], 0x28c}}, 0x0) sendmsg$key(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xfffffffffffffeeb}}, 0x20000842) 20:57:54 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x1d, 0xd0, 0x34, 0x8, 0x46d, 0x8b6, 0x226c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0xab, 0xfd}}]}}]}}, 0x0) 20:57:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x8ab, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:57:54 executing program 0: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x2e, 0x5f, 0x2e, 0x2e, 0x5f, 0x5f]}, 0x70) 20:57:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="bad004ecb828018ee00f20c06635100000000f22c066b9800000c00f326635010000000f3026262e2e0f381d9cac000f797e3826660f3a0d882ba7fc660f2206f0fe8d0800f20f01f9", 0x49}], 0x1, 0x0, 0x0, 0xfffffffffffffdc5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:54 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random\x00', 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x40000009}) 20:57:54 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40043, 0x0) 20:57:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x8000000000005, 0x1}, 0x3c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x1, 0x5, 0x200000100000009, 0x100}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r1, &(0x7f0000eed000), &(0x7f0000b88000)="03"}, 0x20) 20:57:55 executing program 3: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x201002, 0x0) mount(&(0x7f0000000240), &(0x7f0000000140)='.', 0x0, 0x3002480, 0x0) 20:57:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7ffffffff000, 0x0, @adapter}]}) dup3(r0, r1, 0x0) 20:57:55 executing program 0: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80084121, 0x0) 20:57:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="bad004ecb828018ee00f20c06635100000000f22c066b9800000c00f326635010000000f3026262e2e0f381d9cac000f797e3826660f3a0d882ba7fc660f2206f0fe8d0800f20f01f9", 0x49}], 0x1, 0x0, 0x0, 0xfffffffffffffdc5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x102a}, {&(0x7f0000000240)=""/147, 0x6a6}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x2, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000004200050100000000000000000000000019e1fe099075eaca52c28b2c08b8240d74b3d3506c3d94167d3aa68003c5f36b82f6db2ecdeabeb5abf1d050814b2a6558ea15c313f618301d00000000e3bd631eed7850cce36eb4f66d4522f982e3"], 0x17c}}, 0x0) 20:57:57 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9d}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 20:57:57 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'idz'}, 0x0) 20:57:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7ffffffff000, 0x0, @adapter}]}) dup3(r0, r1, 0x0) 20:57:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="bad004ecb828018ee00f20c06635100000000f22c066b9800000c00f326635010000000f3026262e2e0f381d9cac000f797e3826660f3a0d882ba7fc660f2206f0fe8d0800f20f01f9", 0x49}], 0x1, 0x0, 0x0, 0xfffffffffffffdc5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:57 executing program 3: syz_open_procfs(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) 20:57:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x98}]}, &(0x7f0000000000)='(9+\xee\xe4\xfc\x7f\xf7\x8f\xe8\xc4E\x1c \x03\xa1V\tO<\xa0\xf4\xbc\x8cg_[\xe6\x0f\x8bq\xce?\x92[\xeds\xe1)\xd8\xd3\xeae~\aKp\xc7\xb6o\xe4\xbf\x9b~\xff\xfd;\x12\\\x03\xb0z6\xeeY\xae\xd4\xa8\xf51\xe1\x89H\\F7\x04'}, 0x48) 20:57:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000b04fcff", 0x58}], 0x1) 20:57:57 executing program 0: setrlimit(0x7, &(0x7f0000011000)) socket(0x22, 0x2, 0x4) 20:57:57 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x39}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 20:57:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000001c0)="bad004ecb828018ee00f20c06635100000000f22c066b9800000c00f326635010000000f3026262e2e0f381d9cac000f797e3826660f3a0d882ba7fc660f2206f0fe8d0800f20f01f9", 0x49}], 0x1, 0x0, 0x0, 0xfffffffffffffdc5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x77ff, 0x0) readv(r0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x9, @raw_data="1fcb46d02ab6c63c565559417b3a75537c49b43893fc974900400000463f0437f7ffd8500d384ced6347be0711b5c9cc1bf51d241901c2c02cf411338e817d388054685cbb344a3e0244c4ef0915c7c51d07d272610817ba58559342ce7918de9a85638015aef9a5e3cd6a7c9367289b69f9d462ebe0785411a26cfb487d7bc2a5456cb92cfdad5d3c088a2861de26cdb810b47f7095d5b1a0cf189b5b2fc861f8104c4c07882c2e8345bea52167e2d4f9e707d8df10dfbc8b3f2de6d19f8cec666e98588ed484ee"}) [ 544.779751][ T4896] usb 4-1: new high-speed USB device number 37 using dummy_hcd 20:57:57 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @local, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) read(r0, &(0x7f0000000080)=""/33, 0x21) 20:57:58 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) pipe(&(0x7f0000000480)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 20:57:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7ffffffff000, 0x0, @adapter}]}) dup3(r0, r1, 0x0) 20:57:58 executing program 0: r0 = socket(0x1e, 0x1, 0x0) unshare(0x20400) connect$pptp(r0, 0x0, 0x0) [ 545.029979][ T4896] usb 4-1: Using ep0 maxpacket: 32 20:57:58 executing program 1: syz_open_dev$dspn(&(0x7f0000000a00)='/dev/dsp#\x00', 0x0, 0x200480) [ 545.150463][ T4896] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 545.158817][ T4896] usb 4-1: config 0 has no interface number 0 [ 545.237578][ T4896] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=e3.ef [ 545.247193][ T4896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 545.255366][ T4896] usb 4-1: SerialNumber: syz [ 545.307737][ T4896] usb 4-1: config 0 descriptor?? [ 545.351555][ T4896] gspca_main: spca500-2.14.0 probing 046d:0900 [ 545.597209][ T4896] gspca_spca500: reg write: error -71 [ 545.637048][ T4896] gspca_spca500: reg write: error -71 [ 545.657126][ T4896] gspca_spca500: reg write: error -71 [ 545.677124][ T4896] gspca_spca500: reg write: error -71 [ 545.697214][ T4896] gspca_spca500: reg write: error -71 [ 545.717068][ T4896] gspca_spca500: reg write: error -71 [ 545.737184][ T4896] gspca_spca500: reg write: error -71 [ 545.757170][ T4896] gspca_spca500: reg write: error -71 [ 545.776999][ T4896] gspca_spca500: reg write: error -71 [ 545.797061][ T4896] gspca_spca500: reg write: error -71 [ 545.816993][ T4896] gspca_spca500: reg write: error -71 [ 545.837808][ T4896] gspca_spca500: reg write: error -71 [ 545.858239][ T4896] gspca_spca500: reg write: error -71 [ 545.877112][ T4896] gspca_spca500: reg write: error -71 [ 545.885864][ T4896] usb 4-1: USB disconnect, device number 37 [ 546.447026][ T4896] usb 4-1: new high-speed USB device number 38 using dummy_hcd 20:57:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_msfilter(r0, 0x0, 0x31, &(0x7f00000000c0)={@empty, @remote}, 0x10) 20:57:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38f3c47fdba053c4d5415af2ed"], 0x0, 0xd}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:57:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)}) 20:57:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x0, 0x7ffffffff000, 0x0, @adapter}]}) dup3(r0, r1, 0x0) 20:57:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000003240)={0x1, 0x7, 0x3ff, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) 20:57:59 executing program 4: modify_ldt$write2(0x11, &(0x7f00000006c0)={0x804}, 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:57:59 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r0, &(0x7f00000016c0)=[{&(0x7f0000000500)="0e", 0x1}], 0x1, 0x7fffffffffffffff) 20:57:59 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000180), 0x2000000000000040, 0x200) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) 20:57:59 executing program 3: r0 = socket$tipc(0x1e, 0x800000000005, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x2}, 0x10) 20:57:59 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 20:57:59 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff87, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [@hopopts={0xe, 0x1, [], [@enc_lim={0xc001}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 20:58:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x65, 0xef, 0x1e, 0x8, 0x856, 0xac29, 0x7501, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4f, 0x8e, 0x87}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0xac, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000004680)={0x34, &(0x7f00000043c0)={0x0, 0x0, 0x1, "86"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:58:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)) 20:58:00 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045503, 0xfffffffffffffffd) 20:58:00 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) 20:58:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000240)="2f0000001d0003fd6d0000360000000002dd07000218f6001f5f08c908000100020073730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6000000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:58:00 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 20:58:00 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffff41}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000011003586000000030000000007000000", @ANYRES32=r1, @ANYBLOB="00000005000000000c001a000800020003000400"], 0x2c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 20:58:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)) 20:58:00 executing program 4: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 547.557942][T11541] usb 2-1: new high-speed USB device number 31 using dummy_hcd 20:58:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x20000000003, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0414f9f407000904000a00071008000800fe0500ff080001000e000000", 0x24) 20:58:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) mmap$binder(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x2, 0x11, r1, 0x0) r2 = syz_open_dev$vbi(0x0, 0x1, 0x2) write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14}, 0x14) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0xe07000, 0x2, 0x11, r2, 0x0) 20:58:00 executing program 4: unshare(0x2000400) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) [ 547.817288][T11541] usb 2-1: Using ep0 maxpacket: 8 [ 547.959236][T11541] usb 2-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=75.01 [ 547.968784][T11541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.979454][T11541] usb 2-1: config 0 descriptor?? [ 549.157228][T11541] mos7840 2-1:0.0: required endpoints missing [ 549.166432][T11541] usb 2-1: USB disconnect, device number 31 [ 549.867154][ T4896] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 550.107058][ T4896] usb 2-1: Using ep0 maxpacket: 8 [ 550.227197][ T4896] usb 2-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=75.01 [ 550.236480][ T4896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.246205][ T4896] usb 2-1: config 0 descriptor?? 20:58:03 executing program 1: r0 = syz_usb_connect(0x0, 0x297, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0x4, 0xc1, 0x8, 0x1964, 0x1, 0x37eb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x0, 0x8, 0x98, 0x30}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 20:58:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)) 20:58:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) dup3(r0, r2, 0x0) 20:58:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2270, &(0x7f0000000200)) 20:58:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x9) [ 550.677651][ T4896] mos7840 2-1:0.0: required endpoints missing [ 550.719118][ T4896] usb 2-1: USB disconnect, device number 32 20:58:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a48b12f728db4b2b4d2f2fba4fad273b1ea3e46f90", 0x15}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:58:03 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="24000000180007041dfffd946f6105000a0000001f0000000102080008001ec00000ff7e", 0x24}], 0x1}, 0x0) 20:58:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x4) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="008913"], 0x3) read(r0, 0x0, 0x1f6) 20:58:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)) 20:58:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@ipv4={[], [], @multicast1}, @local, @dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 20:58:04 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x4107a) write$cgroup_subtree(r0, 0x0, 0x0) [ 551.129192][ T4896] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 551.377143][ T4896] usb 2-1: Using ep0 maxpacket: 8 [ 551.497193][ T4896] usb 2-1: config 0 has an invalid interface number: 179 but max is 0 [ 551.505466][ T4896] usb 2-1: config 0 has no interface number 0 [ 551.511868][ T4896] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=37.eb [ 551.521523][ T4896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.531192][ T4896] usb 2-1: config 0 descriptor?? [ 551.778022][ T4896] RobotFuzz Open Source InterFace, OSIF 2-1:0.179: failure sending bit rate [ 551.787246][ T4896] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.179 failed with error -71 [ 551.799575][ T4896] usb 2-1: USB disconnect, device number 33 [ 552.536999][T11541] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 552.777064][T11541] usb 2-1: Using ep0 maxpacket: 8 [ 552.897122][T11541] usb 2-1: config 0 has an invalid interface number: 179 but max is 0 [ 552.905423][T11541] usb 2-1: config 0 has no interface number 0 [ 552.911798][T11541] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=37.eb [ 552.920961][T11541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.930408][T11541] usb 2-1: config 0 descriptor?? [ 553.187108][T11541] RobotFuzz Open Source InterFace, OSIF 2-1:0.179: failure sending bit rate [ 553.195997][T11541] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.179 failed with error -71 [ 553.208156][T11541] usb 2-1: USB disconnect, device number 34 20:58:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c430800000092", 0x2e}, {&(0x7f00000001c0)="53000000c659ca80fffffffb00bb3212eaf70d6719f68665389c21d5f8ed2fbd13000000e2ffff0000200000000049964333a3031ddc5650b6ffa398b62feeaa37f55aaf208a1435eeb19caaf3645ce06976a5cbc2eb56fc", 0x58}], 0x2) 20:58:06 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x74, 0x4c}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 20:58:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x4000009a, 0x0, 0xc001001b], [0xc1]}) 20:58:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xffe) 20:58:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0, 0x0, [0x1a0ffffffff, 0x1a0ffffffff, 0x2e]}, 0x3c) 20:58:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800030800000000a9030000020000000000000008000100575aff9fefebf9ae20ba855acbbe72f36b6744254ffe2e4173a057dcd8d2476d0479b7d4380144abbbb4bc94819c7fdd68561939066d757a3cc10ed9abb13edfc987bdd028d9a5605d1b73d76ea549e2012287087c9acc53ec20b742f7", @ANYRES32=0x0], 0x20}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x218fe53f1794f59, 0x0) 20:58:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x80}) dup2(r0, r4) [ 553.760186][T17890] kvm [17889]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 20:58:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0, 0x0, [0x1a0ffffffff, 0x1a0ffffffff, 0x2e]}, 0x3c) 20:58:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x2, &(0x7f0000cbc000)=""/244, &(0x7f0000000000)=0x2) 20:58:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xcd) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x98) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0xfc, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) 20:58:07 executing program 0: syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x70, 0x57, 0x29, 0x8, 0x7c0, 0x1503, 0x5933, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x1, 0x23, 0x6b, 0xbc, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) 20:58:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0, 0x0, [0x1a0ffffffff, 0x1a0ffffffff, 0x2e]}, 0x3c) 20:58:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00a4f) ppoll(&(0x7f0000000000)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 20:58:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x40, 0x0, r0, 0x0, [0x1a0ffffffff, 0x1a0ffffffff, 0x2e]}, 0x3c) 20:58:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x80}) dup2(r0, r4) 20:58:07 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x2}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0, 0x2}], 0x1, 0x60ff}}], 0x48}, 0x0) [ 554.438285][ T5] usb 1-1: new low-speed USB device number 33 using dummy_hcd 20:58:07 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc4, 0xad, 0x26, 0x10, 0x46d, 0x840, 0x8bb0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x4c, 0x7e}}]}}]}}, 0x0) [ 554.827463][ T5] usb 1-1: config 0 has an invalid interface number: 170 but max is 0 [ 554.835937][ T5] usb 1-1: config 0 has no interface number 0 [ 554.842264][ T5] usb 1-1: config 0 interface 170 altsetting 0 endpoint 0xB is Bulk; changing to Interrupt [ 554.852458][ T5] usb 1-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=59.33 [ 554.861701][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:58:07 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010"], 0x1}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:58:07 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0xe, @sliced}) [ 554.881280][ T5] usb 1-1: config 0 descriptor?? [ 554.907436][ T4896] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 554.924259][ T5] iowarrior 1-1:0.170: no interrupt-in endpoint found 20:58:08 executing program 3: r0 = socket$kcm(0x2b, 0x200004000000001, 0x0) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x200000000003, 0x4) sendmsg$kcm(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="39000000140081ae00d175040f62b04a2b546f2a66bf8c6e3fa1bcb3735858eba3390983b34f897506e606dbb7d553b4a40004000000000008", 0x39}], 0x1}, 0x0) 20:58:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x80}) dup2(r0, r4) [ 555.041937][T17949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 20:58:08 executing program 3: unshare(0x8000400) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x7704) [ 555.125834][ T5] usb 1-1: USB disconnect, device number 33 [ 555.147040][ T4896] usb 6-1: Using ep0 maxpacket: 16 [ 555.267816][ T4896] usb 6-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=8b.b0 [ 555.277639][ T4896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.296488][ T4896] usb 6-1: config 0 descriptor?? [ 555.341555][ T4896] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 555.629408][ T4896] usb 6-1: USB disconnect, device number 20 [ 555.907099][ T5] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 556.287039][ T5] usb 1-1: config 0 has an invalid interface number: 170 but max is 0 [ 556.295490][ T5] usb 1-1: config 0 has no interface number 0 [ 556.301791][ T5] usb 1-1: config 0 interface 170 altsetting 0 endpoint 0xB is Bulk; changing to Interrupt [ 556.312113][ T5] usb 1-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=59.33 [ 556.317022][ T4896] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 556.321290][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.338338][ T5] usb 1-1: config 0 descriptor?? [ 556.380809][ T5] iowarrior 1-1:0.170: no interrupt-in endpoint found [ 556.577073][ T4896] usb 6-1: Using ep0 maxpacket: 16 [ 556.583552][ T5] usb 1-1: USB disconnect, device number 34 [ 556.697228][ T4896] usb 6-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=8b.b0 [ 556.706571][ T4896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.716189][ T4896] usb 6-1: config 0 descriptor?? [ 556.762715][ T4896] gspca_main: STV06xx-2.14.0 probing 046d:0840 20:58:10 executing program 0: syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x70, 0x57, 0x29, 0x8, 0x7c0, 0x1503, 0x5933, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x1, 0x23, 0x6b, 0xbc, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) [ 557.039333][ T4896] usb 6-1: USB disconnect, device number 21 20:58:10 executing program 4: r0 = socket$kcm(0x2, 0x1000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x68, &(0x7f00000001c0), 0x4) close(r0) 20:58:10 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f00000013c0)={{0x12, 0x1, 0x0, 0xbc, 0x40, 0xbe, 0x8, 0x7b0, 0x7, 0x85d1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x1, 0xf4, 0xbc, 0x6f, 0x0, [], [{{0x9, 0x5, 0x5, 0x1}}]}}]}}]}}, 0x0) 20:58:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200)) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 20:58:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x80}) dup2(r0, r4) 20:58:10 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r0, 0x7004) [ 557.438960][ T30] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 557.479208][ T5] usb 1-1: new low-speed USB device number 35 using dummy_hcd 20:58:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008932, &(0x7f0000000540)) 20:58:10 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r0, 0x7004) 20:58:10 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r0, 0x7004) 20:58:10 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r0, 0x7004) [ 557.677227][ T30] usb 2-1: Using ep0 maxpacket: 8 20:58:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) 20:58:10 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r0, 0x7004) [ 557.807341][ T30] usb 2-1: config 0 has an invalid interface number: 40 but max is 0 [ 557.815694][ T30] usb 2-1: config 0 has no interface number 0 [ 557.822528][ T30] usb 2-1: config 0 interface 40 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 557.833623][ T30] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=85.d1 [ 557.842849][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.879254][ T5] usb 1-1: config 0 has an invalid interface number: 170 but max is 0 [ 557.887731][ T5] usb 1-1: config 0 has no interface number 0 [ 557.893977][ T5] usb 1-1: config 0 interface 170 altsetting 0 endpoint 0xB is Bulk; changing to Interrupt [ 557.904342][ T5] usb 1-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=59.33 [ 557.913648][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.966623][ T30] usb 2-1: config 0 descriptor?? [ 558.013625][ T30] HFC-S_USB: probe of 2-1:0.40 failed with error -5 [ 558.043069][ T5] usb 1-1: config 0 descriptor?? [ 558.090510][ T5] iowarrior 1-1:0.170: no interrupt-in endpoint found [ 558.210329][ T30] usb 2-1: USB disconnect, device number 35 [ 558.293762][ T4896] usb 1-1: USB disconnect, device number 35 20:58:11 executing program 0: syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x70, 0x57, 0x29, 0x8, 0x7c0, 0x1503, 0x5933, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x1, 0x23, 0x6b, 0xbc, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) 20:58:11 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 558.987078][ T4896] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 559.117117][ T30] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 559.227208][ T4896] usb 2-1: Using ep0 maxpacket: 8 [ 559.347208][ T4896] usb 2-1: config 0 has an invalid interface number: 40 but max is 0 [ 559.355591][ T4896] usb 2-1: config 0 has no interface number 0 [ 559.361990][ T4896] usb 2-1: config 0 interface 40 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 559.373143][ T4896] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=85.d1 [ 559.382541][ T4896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.392086][ T4896] usb 2-1: config 0 descriptor?? [ 559.442068][ T4896] HFC-S_USB: probe of 2-1:0.40 failed with error -5 [ 559.509397][ T30] usb 1-1: config 0 has an invalid interface number: 170 but max is 0 [ 559.517829][ T30] usb 1-1: config 0 has no interface number 0 [ 559.524042][ T30] usb 1-1: config 0 interface 170 altsetting 0 endpoint 0xB is Bulk; changing to Interrupt [ 559.534713][ T30] usb 1-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=59.33 [ 559.544103][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.553555][ T30] usb 1-1: config 0 descriptor?? [ 559.600471][ T30] iowarrior 1-1:0.170: no interrupt-in endpoint found [ 559.638798][ T30] usb 2-1: USB disconnect, device number 36 [ 559.803624][ T4896] usb 1-1: USB disconnect, device number 36 20:58:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x2, 0x17, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:58:13 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r0, 0x7004) 20:58:13 executing program 2: ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000b44000/0x2000)=nil}) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320c) 20:58:13 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r0, 0x7004) 20:58:13 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:13 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000000841}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 20:58:13 executing program 3: syz_emit_ethernet(0x6f, &(0x7f0000000000)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote}, @udp={0x0, 0x0, 0x4d, 0x0, [], "1e06a5d04ce0c9749147804fc05411bd644173d44aa781bf5a98913f1fcb873ccf51947cbc293732c8c008a5dc6c0ed6438094f441f545dd6f69e834964a5435211b436e78"}}}}}, 0x0) 20:58:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x4}) 20:58:13 executing program 0: syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x70, 0x57, 0x29, 0x8, 0x7c0, 0x1503, 0x5933, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x1, 0x23, 0x6b, 0xbc, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) 20:58:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="c11a957ab11e1b58634333d9de28009470d8940932fd93172e6bbe6b9b4e1d3da460638973aef9da527b31ffe090458eba4a4f9c6e1857dcf63120f3a12121a8a864f5186de9bb499ae04096a3a97214b1d0a0151e84cdcd38bffa427c05222bf58df7514fb1a7232b87dc2d27edb1cdb26ec1cc26ce4e51eb4f2a7e40ebce", 0x7f, 0x40000, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0x366, 0x0, 0x0, 0xfffffffffffffe7c) 20:58:13 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000000841}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 20:58:13 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10224fc00030000000a000a00053582c1b0acea8b09000180feff0000d1bd", 0x2e}], 0x1}, 0x0) 20:58:13 executing program 3: syz_emit_ethernet(0x6f, &(0x7f0000000000)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote}, @udp={0x0, 0x0, 0x4d, 0x0, [], "1e06a5d04ce0c9749147804fc05411bd644173d44aa781bf5a98913f1fcb873ccf51947cbc293732c8c008a5dc6c0ed6438094f441f545dd6f69e834964a5435211b436e78"}}}}}, 0x0) [ 560.629742][T18059] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 20:58:13 executing program 4: unshare(0x400) r0 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) 20:58:13 executing program 3: syz_emit_ethernet(0x6f, &(0x7f0000000000)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote}, @udp={0x0, 0x0, 0x4d, 0x0, [], "1e06a5d04ce0c9749147804fc05411bd644173d44aa781bf5a98913f1fcb873ccf51947cbc293732c8c008a5dc6c0ed6438094f441f545dd6f69e834964a5435211b436e78"}}}}}, 0x0) 20:58:13 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000000841}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 560.738827][ T5] usb 1-1: new low-speed USB device number 37 using dummy_hcd 20:58:13 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:13 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100006e", 0x24) 20:58:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92425a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000003, 0x0, 0x27) 20:58:14 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000000841}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 560.983991][T18080] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 561.129451][ T5] usb 1-1: config 0 has an invalid interface number: 170 but max is 0 [ 561.137861][ T5] usb 1-1: config 0 has no interface number 0 [ 561.144133][ T5] usb 1-1: config 0 interface 170 altsetting 0 endpoint 0xB is Bulk; changing to Interrupt [ 561.154396][ T5] usb 1-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=59.33 [ 561.163606][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.232367][ T5] usb 1-1: config 0 descriptor?? [ 561.293840][ T5] iowarrior 1-1:0.170: no interrupt-in endpoint found [ 561.496678][ T4896] usb 1-1: USB disconnect, device number 37 20:58:15 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x3) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:15 executing program 3: syz_emit_ethernet(0x6f, &(0x7f0000000000)={@local, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @remote}, @udp={0x0, 0x0, 0x4d, 0x0, [], "1e06a5d04ce0c9749147804fc05411bd644173d44aa781bf5a98913f1fcb873ccf51947cbc293732c8c008a5dc6c0ed6438094f441f545dd6f69e834964a5435211b436e78"}}}}}, 0x0) 20:58:15 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1=0xe000f000}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c8d1f6", 0x0, "071ccd"}}}}}}, 0x0) 20:58:15 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) 20:58:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92425a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000003, 0x0, 0x27) 20:58:15 executing program 0: r0 = socket$inet(0x2, 0x80005, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast2}, 'batadv0\x00'}) 20:58:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={[], 0x0, 0x7, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 20:58:15 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x39}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 20:58:15 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10004000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x10000000) 20:58:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$unix(0x1, 0x805, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x2) listen(r1, 0x0) accept$unix(r1, 0x0, 0x0) [ 562.350560][T18115] input: syz0 as /devices/virtual/input/input32 [ 562.443474][T18124] input: syz0 as /devices/virtual/input/input33 20:58:15 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0) 20:58:15 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./bus\x00', r1, &(0x7f0000000180)='./file1\x00', 0x0) 20:58:15 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 20:58:15 executing program 3: r0 = semget$private(0x0, 0x2000000010a, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x6}, {0x4}], 0x2) semop(r0, &(0x7f0000000100)=[{0x0, 0xffffffff}], 0x1) semctl$SETALL(r0, 0x0, 0xf, 0x0) 20:58:15 executing program 0: r0 = userfaultfd(0x0) sigaltstack(&(0x7f0000789000/0x1000)=nil, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 20:58:15 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2721, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f00000017c0)={{&(0x7f0000813000/0x4000)=nil, 0xe07000}}) 20:58:15 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92425a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000003, 0x0, 0x27) 20:58:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x28, r1, 0x311}, 0x234}}, 0x0) 20:58:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x23, 0x1, 0x0, 0x0, {0x2}, [@typed={0x14, 0x1, @ipv6=@loopback}]}, 0x28}}, 0x0) [ 562.980027][T18156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 563.017482][T18158] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. 20:58:16 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="11dca50d5e0bcfe47bf070afdb7e9819d361d6b7bdc0335b11a7c17772a5e84d9d62e47b85549f0737109c1d71cd1688e18dad0caed402a55cd479ee1910ed9b861707619380abd7ea316096cc6191cbfb87c3ab4cd7862c0cd3565cc1b990d465cccf62f6d5d6dbe148a62cdb860a3379388c333a86999490a0ec2b8d61170c5d1571f7360a3adccdc966073a9b6036630dd425f335768f057c35d691965433c6") setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x3, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x9, 0x0, 0x0, 'tunl0\x00', 'hwsim0\x00', 'veth1\x00', 'veth1_to_hsr\x00', @dev, [], @local, [], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x1a6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 563.017482][T18158] The task syz-executor.3 (18158) triggered the difference, watch for misbehavior. 20:58:16 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2721, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f00000017c0)={{&(0x7f0000813000/0x4000)=nil, 0xe07000}}) [ 563.063051][T18160] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 20:58:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet6(0xa, 0x803, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) ioctl(r1, 0x801000008912, &(0x7f0000000300)="11dca50d5e0bcfe47bf070") ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@rand_addr="4f4a10731bd939d71fc04456f10bc4b3", 0x0, r2}) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev, 0x0, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x29003) sendmmsg$alg(r3, &(0x7f0000003680)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="76bccff976e101fe1c7431c5d80741c0942a7a4892e41d5e359ca41d87714a342c4bf70175f7c21ef923a167941e3eecfea807b09e5a90b5ce6f57b8f61274b2ac414e08bebdecbacc3b0429b42d3b48f48db95a2d0d8aaa5a0943ff16fd275944ea4c0b4284bd986212ffbedc30dd1cce82f97ac7438c09a26de53b6da77c3b636c44671677d07510285c63c5995942194b4b51efaa44dd49c4be0d3caa64322284c5e6112532020c3cab02ba8b749142150ca4c5cf54c956c8e10dd28e9f", 0xbf}], 0x1, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x368b6698a2ef73d0}, @assoc={0x18, 0x117, 0x4, 0x100}, @iv={0xb0, 0x117, 0x2, 0x9a, "18e369cf4544c736a5823bc8df3e26b0e53b28369f18bf79384c4806950f5669b906178746afeb775ab2cfe17f86127774d12cd5a08aa831f62c81065800174f1476b54b9eea86b8d10d9fc78d20c9d40dc3f165da7ec7acd6b6f10b2c0f85faa0046823105e42a859219164a6a947be9a033f55da96d9698dc2285a7392da041d5d06aa16c116e006052c35f9e63d193425d8ebf6d7038673f8"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x80, 0x117, 0x2, 0x69, "6ed7d05a468f1672f7e735e6dd23c29252ec53278c43e18490bbdb136fc6de27ef0984a894595c49ba1d5c34ee1e88c7a8ac1ccf9e823314d6287546e19dfa2e7b0c75a62d3ae2c8ccbd250e411c45aec097955962b27bd9ba94ad1cfe247f914a2d80c5bfdf010b60"}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x110, 0x117, 0x2, 0xf8, "b5be2bb4739c4bb73a3a965fc630814210d068a5a51f300b7fef31390c36d410d638872a6e6d4a4f0549804f01a1ee4cb03d733d16f70fdee0b0b4040a9e4ec1495c369799fcc3eea8df5cf97fe5c9c5b33cdf93d57be93c9c7b8d7921bd3a006565bf3b30dbd0dd0339c6bf8f387cda585d613f1dbe2da5e8d03062d47afe5e04c78bf2dbb90d47edc9236086ac18423621927c210de442af70a1bd6c3d162b8dd1f3fcad2334b1e3e5deed8ec21c2208bbc27f4539f4f842671c6278849b13a9d5bfacbe0d8a850312e9ee494c9652520625139e98313c306d5f92eddf7eeb136e87a5eb1712a6e98ca807bbe3883aca3a023e9e202255"}], 0x2a0, 0x84}, {0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="ddb6e7d969e0d4e614e1ba05fc253b5bf823da7654b0136796462bfc978a9754c6fa49ff2c352d11ff43d9968bd5e7dfa162cbc4d435b676ac3bb5b0eabbe5fee7", 0x41}, {&(0x7f0000001680)="004730a0351767221af564bb79b058749b5cf076467213d9cc8f41e00b64e564a920e36c9bb69b62543f3816469f6d4af4e6345a97ed6719acb239ef294f1fa47624d0c2d55fc9380395e49fdd7fa9a84afc287c01a44aee9a27e15cf9d01b2dbcd0e3058eb264e8f79f87871656ab", 0x6f}], 0x3, &(0x7f00000002c0), 0x0, 0x10}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="71494cc0c3a645cbb80458882f0322e9b226ca9773802834a66d9b8ca5295cf58d675ed73d3e6518eb189ff6d7f6b6bf5dcf05bb85549fd3683792f4c78e3bc498adfaeda1f51650d03b2c98a3d07266ddc4cf4c391033f8e3c6e298cc2c14", 0x5f}, {&(0x7f0000002780)="a9a64614b72fa57c6ef27dff7db8c84e94587e2183c785096fcc6612af01fcad750a370f0e0f7ecc2bdb59070bcf5f51e9698bf1d78e0c6b7d653c01f13f87c445b37a638396f8b4a0e7a91a9ea7b6be62913eb4271412a43fd8c311b91dca10da920aac8aaea7e39fa0a562ad353ced38453765917122ca70a50d603f3f3f172be93aae8df4a1bc61cfabc85361d0a6852aa8245cc55f38aec680b2fd172df8258990d5fccc1031e3b2efc2801a81a5117570051977e8526fa6ca55d09124413f7ab1291a7c62016b4fabf618c0", 0xce}, {&(0x7f0000002880)="9c43eef628212b6116226f87a3bcca788506e73172bbd8cdace705b4abacea6e16369fff9141be5d9781b00b5cef368d00c06b2e14edbfa7bd8a2e1b32049d7e56a7e7afef7ad501f94e3dce26512b734c0d60eef23587a063a2866173bdf0b6162ed6cf4ead1f242392eb9e", 0x6c}, {&(0x7f0000002900)="961d9f9454d08ab68661bbdc863d0e4c9f1e366c8460cee3ac1a84f5e82250558a2ab26c06aa1c6f19e87aeea0cdf56e6964a7e6bb4d7797c3d05334c8ea0add92959f92cbbb037a9e88b5bf216aca1b379f0d9f67e0bf0bb9c89b4a0f24234568357d23376153bdfb4e46710d8afb4aee08dcb261c9dfc702d0fd65aaf85010587f6d167aa344fce693", 0x8a}, {&(0x7f00000029c0)="a796e5b302f893a3489943cd1ad83551d5f088581ceae1d84b114ae082d85a21a23f1c3cc2d2c6aad7b88691d1056f34b7cd969d95e1cd137fb97664cb330e5635b9e4c4f55e97a96c7906aabf5d810611e8c3fb4d5b636d048e4e3e388b42055d6116c32147fb02e3098657dc8f3a2931e524ce7ae67b10e082a602eb052bb7caa56b8f71c746da6987ba5b02cfae5a85bac714eeb28feba6e49669b58a505bfbd15251379fbca416b82ceee5145648a8d8c5ceba4d1171ad2406a42f4eb870", 0xc0}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)="520d2f3f9a7352289d683b0972d1f6019ede1b08d41d5e07730d20de4010790f102ee3eb0164deeee61670383086dc4121e9c75b51e9cc41a2730a37904f6fab57512831389da2f4059389fbf8b55a88233bc8a55ea306c99eb503d307b551417372ae47dd5b12668b4ae4225a9de1d34737b0f1306ee341ab3a8a885fbaded55c7f3c9936d8663782b94d4d7a6b19de1df390af67f9cafdebb77f49545f3f3c528b8f2fef6460a813e6c128da9cca08786ebdbcd7333ee144e5d61c543b041ae50c529ee03e849b1188a701326c4fddf55ac8282e78e631ebe0", 0xda}], 0x8, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002c40)="8fb7f35876ad26459e5f988eafda9d5990906c75c905988edcfd911d5f1fcc492a371bed498654716704eb2f2298e5c6fb2e2faeda7788a990086386ffacffb4efa153f0965e76696bc2e516ba4a5304eadecc8eb30cdea2942ec3fd6f615f1e223d01098c7ee8ca25ee02761254a2cfc1536115705ea43398c2faef04fbd35f273e50d8c3d8493b3c337479d4c56b422ca1847416452e1162799434111778f3016c49eba38a9ae1de28f54f00c4397fc90e4ef72a5032017d63ac82668cd47c82d1004fc1a807a1714920159d9cd910723dbbcab526dd649c6e90b35026444da938ae16fc", 0xe5}, {&(0x7f0000002d40)="e91cd22d65c6c803ab7292f246428bc627cae78762d4ced3edd66738fcc8211e867a1f43660db3ba1e1bfaf8b5d8c4ea67e65a9b71b961f43620cb96a7ae296609c378a1fee2c6cf343063d3b8eff2e3e32e4ac598aa5241c9cadd8a34953f9d9743974e2ce343686a79f2afeb68b0c7a10a7f892c737742eafe3414368cd2ad5de23f35aa9368034d71f571d368c74d2100410fa552ee1522e9f1ca5179d0762a9a60d80b0ccff1bd2fb25ef9a11959b44c43a25dbfc7cf211a", 0xba}, {&(0x7f0000002e00)="4e76b4eea49a7dfc6c6861c0420fbdf5db1ae951897f467831fcd722be13e2802549e85b0586e84a0beb77824b6fb65294afbcf3b2bd92c3e5793522d8c906aed7807b456fb5c8644257b231eae3e8a084122799be79526afffca169e2f54b3f94bdf6df06e7da18113bc89eebc21fb7461d815ec3ccabd296fd181bc72ee1badeb260b4705ec8592e9094331864b06dc402656b24a985f39dc20453d041eb7aba215e32c123a58dc1d9cb27fbb6bde858ce5d596ca615b3a8c9d3205dd2695d11ae4f263a992f63cacc07d35774fd1acf1bafaaee009f5477dd933b695e3ff827da2f51", 0xe4}, {&(0x7f0000002f00)="a78a18ea445298cc41d922607e8d2060850ac1be92111f48bc6f0b841c9a63feedb1c4b2aeeea83ca7c3f10be2b1a109df5b8a8b9fc14c9c3bdda540d853ff929a1b01bd2b84d483402559e1aa55f58be31d6a12b6d323338f9ccfecf0672c91582f28a5", 0x64}], 0x4, &(0x7f0000002fc0)=[@iv={0xf0, 0x117, 0x2, 0xdc, "e9e3f4daa4c7dfdc35581e7ad587733a65f0508e0e7916a47ec6afb8da1f9c72953a5a8c894d67ed8dbd999e3a83c7bee78ecb7ed86a47aca76f56d792e30898424ece4524afef9d7c3acce12e6064da7eec823d520e4bbca06e76e5c2882e068049281a4886795c95c7a18f33b2850a7655d779b00c236763e8ee1b56884121fc153581d50be8c5be03279eed1bac443624722390fe811a4612c39e3c172eea0bbd5d9cd2c70efacbe1b421dccd618176baa415db4d43c8732b3884c00ab06d37ac8f9c23907164f3aeb1e202dec87a704eee22e64c9d485fd8fc94"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18}, @iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @iv={0x60, 0x117, 0x2, 0x49, "bf5f41312ec391d7878e58a033483ef69b2d37cb628e24b779cfd586aa127ba185c29a5b45e55af140e174d3595265100809548d17777bdb4188119c4fc1e1c9481fdd40bb881388be"}], 0x1e0, 0x50880}, {0x0, 0x0, &(0x7f00000031c0), 0x0, &(0x7f0000003200)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @assoc={0x18, 0x117, 0x4, 0x3a8f}, @op={0x18}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x8000}], 0xa8, 0x4000}, {0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000032c0)="d0274a2b8ff60c9b93890aee1e1c5ebc5ee629cb875a3e6cc70625e01daee32a1b3deec13bc47bdc9a415ad42b47de327cd36f7d0b2ffc73757540e890ff207119109c6bb30a5872a13960b0ee8ce02d121e9c31f73a16d2ad37689be9f51fce7489299837fbbed3ddb7e7ca73a908cefc0b796270a2abd0a6255946db809ec70547356c58f1c3641be32c3ce329e7636b426d1a6acb7867b87095ff2a1da56c0762634bed64279f6f28fa383d094b6652a6b874a6608c0e0dc32b8bce75b22657ecd95d5c4e2571bed2ede676a9e1315853f10e6b2e4a8fd756420104a8", 0xde}, {&(0x7f00000033c0)="f5aa433accb5b426d349ecb3355e9a2bdf9a29f3413cb1957fa68db8bc519a7058c807babc1eae67820f1e64d09c85b649d7574ef759f58aaedf932f3f1973f1dfbc34b44c19419365f3418c61e4089d", 0x50}, {&(0x7f0000003440)="42550b8d9f387d720215529c8f18a5378c05fbde2897520d4a1176da162fece9ae7b7e84aa26fa6b615bc48cbdae422ca35c2ec5848f3a476464656ebc966f7536805a97cf72eb07ce76d4cf0e166e1e46f9d3cf78c3747f43ec1b2243107536030c00eca6841549118c1f6c9c9f4cf76b8acac12717b1c72dedae7df496ba037f36a21d3a9d60c69bcb2e02e0227b3f1fb9dc2d93d05e86d0b3d0a4673861adb6afb3367ac7277bfeed24bc72e0658d5e2d1014d8f63382bd8dbb3001d5033334811c63d9d79d18d129377545276f57373b9e470201b1a8aaa4b9b1ea7f4d299f6ee15261cb31fa17075c719e", 0xed}, {&(0x7f0000003540)="fa6e78d8a5a8abf0f923c1c9fa852aea6d2da60b5c1fb54e213a0b8551b8e652898675a571a5c23443535d901b105a05c173cceebb937617337af04701605a7bdfbb17110db5141888bf172273e67aca87e1c8f6cba97058f5", 0x59}, {&(0x7f00000035c0)}], 0x5, 0x0, 0x0, 0x1}], 0x6, 0x0) 20:58:16 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2721, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f00000017c0)={{&(0x7f0000813000/0x4000)=nil, 0xe07000}}) 20:58:16 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty=0x2}, "040088beffff0000"}}}}}, 0x0) 20:58:16 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92425a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000003, 0x0, 0x27) [ 563.467339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 563.473528][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 563.588740][T18175] bridge0: port 1(bridge_slave_0) entered disabled state 20:58:16 executing program 3: r0 = semget$private(0x0, 0x2000000010a, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x6}, {0x4}], 0x2) semop(r0, &(0x7f0000000100)=[{0x0, 0xffffffff}], 0x1) semctl$SETALL(r0, 0x0, 0xf, 0x0) 20:58:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x15, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0x137) 20:58:16 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="11dca50d5e0bcfe47bf070afdb7e9819d361d6b7bdc0335b11a7c17772a5e84d9d62e47b85549f0737109c1d71cd1688e18dad0caed402a55cd479ee1910ed9b861707619380abd7ea316096cc6191cbfb87c3ab4cd7862c0cd3565cc1b990d465cccf62f6d5d6dbe148a62cdb860a3379388c333a86999490a0ec2b8d61170c5d1571f7360a3adccdc966073a9b6036630dd425f335768f057c35d691965433c6") setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x3, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x9, 0x0, 0x0, 'tunl0\x00', 'hwsim0\x00', 'veth1\x00', 'veth1_to_hsr\x00', @dev, [], @local, [], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x1a6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 563.772670][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 563.782717][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.790073][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 20:58:16 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x42000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2721, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f00000017c0)={{&(0x7f0000813000/0x4000)=nil, 0xe07000}}) 20:58:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x15, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0x137) 20:58:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}]}, 0x110) 20:58:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2, 0x14, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x0) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0x14) 20:58:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x15, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0x137) 20:58:17 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="11dca50d5e0bcfe47bf070afdb7e9819d361d6b7bdc0335b11a7c17772a5e84d9d62e47b85549f0737109c1d71cd1688e18dad0caed402a55cd479ee1910ed9b861707619380abd7ea316096cc6191cbfb87c3ab4cd7862c0cd3565cc1b990d465cccf62f6d5d6dbe148a62cdb860a3379388c333a86999490a0ec2b8d61170c5d1571f7360a3adccdc966073a9b6036630dd425f335768f057c35d691965433c6") setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x3, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x9, 0x0, 0x0, 'tunl0\x00', 'hwsim0\x00', 'veth1\x00', 'veth1_to_hsr\x00', @dev, [], @local, [], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x1a6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:17 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) 20:58:17 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:58:17 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) [ 564.514777][T18241] sctp: [Deprecated]: syz-executor.5 (pid 18241) Use of int in max_burst socket option. [ 564.514777][T18241] Use struct sctp_assoc_value instead 20:58:17 executing program 3: r0 = semget$private(0x0, 0x2000000010a, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x6}, {0x4}], 0x2) semop(r0, &(0x7f0000000100)=[{0x0, 0xffffffff}], 0x1) semctl$SETALL(r0, 0x0, 0xf, 0x0) 20:58:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_buf(r0, 0x1, 0x15, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0x137) 20:58:17 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) 20:58:17 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="11dca50d5e0bcfe47bf070afdb7e9819d361d6b7bdc0335b11a7c17772a5e84d9d62e47b85549f0737109c1d71cd1688e18dad0caed402a55cd479ee1910ed9b861707619380abd7ea316096cc6191cbfb87c3ab4cd7862c0cd3565cc1b990d465cccf62f6d5d6dbe148a62cdb860a3379388c333a86999490a0ec2b8d61170c5d1571f7360a3adccdc966073a9b6036630dd425f335768f057c35d691965433c6") setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x3, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x9, 0x0, 0x0, 'tunl0\x00', 'hwsim0\x00', 'veth1\x00', 'veth1_to_hsr\x00', @dev, [], @local, [], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x1a6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:17 executing program 4: r0 = socket$inet6(0xa, 0x4000000080002, 0x88) connect$inet6(r0, &(0x7f0000005d00)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000140)=0xa, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0xc4, 0x0) 20:58:17 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000ac0)={0x0, 0x2710}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec0, 0x0) 20:58:17 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendmmsg$alg(r1, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="99", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x3}, 0x8) 20:58:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10012, r0, 0x0) lseek(r0, 0x0, 0x1) 20:58:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x629}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000200000007000000000005"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:18 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) r5 = socket$key(0xf, 0x3, 0x2) dup3(r5, r4, 0x0) dup3(r4, r3, 0x0) [ 565.185993][T18275] kvm [18272]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x104d00000000f [ 565.242702][T18275] kvm [18272]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x104d00000000f [ 565.285851][T18275] kvm [18272]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x104d00000000f 20:58:18 executing program 5: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) write(r0, &(0x7f0000000080)="2400000022001f0214f9f40700090408000018060000000000000000000000040000c000", 0x24) 20:58:18 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x4}], 0x1, &(0x7f0000000180)) 20:58:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=@routing={0x0, 0x4, 0x4, 0x0, 0x0, [@ipv4={[], [], @broadcast}, @loopback]}, 0x28) 20:58:18 executing program 3: r0 = semget$private(0x0, 0x2000000010a, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x6}, {0x4}], 0x2) semop(r0, &(0x7f0000000100)=[{0x0, 0xffffffff}], 0x1) semctl$SETALL(r0, 0x0, 0xf, 0x0) 20:58:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001000130700000000000000000000000000000000000000000000000000000000000000000000ffffac14ffaa00000000000000000000007c16be1a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c001f00000001000000000000000000000000000000000000000000480001006d643500"/268], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x44) 20:58:18 executing program 2: syz_usb_connect(0x2, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0xa, 0x97, 0x2e, 0x40, 0x1870, 0x1, 0x5d80, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0xc}}, {{0x9, 0x5, 0x8d, 0x1d, 0x7fffffff}}]}}]}}]}}, 0x0) 20:58:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000107}]}) 20:58:18 executing program 5: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000d04000/0x2000)=nil, 0x2000, 0xe000, 0x3, &(0x7f0000fc3000/0xe000)=nil) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:58:18 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x3c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80, 0x0, 0x8847], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 565.687021][T18305] netlink: 'syz-executor.1': attribute type 31 has an invalid length. 20:58:18 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) link(&(0x7f00000002c0)='./file0/file0/../file0\x00', &(0x7f0000000340)='./file1\x00') 20:58:18 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x3, @string={0x3, 0x3, "fe"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0xac, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 20:58:18 executing program 4: unshare(0x8000400) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x3, 0x3b, 0x0, 0xffffffffffffff9c}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)) 20:58:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000007c0)={0x3, 0x2000000000000035, 0x0, 0xffffffffffffffff}) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 20:58:19 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2, 0x0, &(0x7f00000000c0)) [ 565.938159][ T5] usb 3-1: new full-speed USB device number 14 using dummy_hcd 20:58:19 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3}, 0x48) [ 566.178406][ T4896] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 566.337273][ T5] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 566.345681][ T5] usb 3-1: config 0 has no interface number 0 [ 566.352117][ T5] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 4 [ 566.363213][ T5] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8D has invalid maxpacket 2047, setting to 1023 [ 566.374507][ T5] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=5d.80 [ 566.384101][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.393821][ T5] usb 3-1: config 0 descriptor?? [ 566.442737][ T5] usbtouchscreen: probe of 3-1:0.83 failed with error -22 20:58:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x7ffffff9, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x24, 0x2, [@tunl_policy=[@IFLA_IPTUN_TOS={0x8}], @tunl_policy=[@IFLA_IPTUN_TTL={0x8, 0x4, 0xc1}], @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}]]}}}]}, 0x54}}, 0x0) 20:58:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x0, 0x7ffd, 0x1}, 0xc) sendmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000002840)}}, {{&(0x7f0000001340)=@hci, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) [ 566.540145][ T4896] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 566.548678][ T4896] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 566.556979][ T4896] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 566.566281][ T4896] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.577516][ T4896] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 566.587447][ T4896] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 566.597356][ T4896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.606558][ T4896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.627666][T18345] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 566.635892][T18345] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 566.644303][T18345] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 566.652863][T18345] netlink: 'syz-executor.5': attribute type 15 has an invalid length. [ 566.666606][ T5] usb 3-1: USB disconnect, device number 14 [ 567.467045][ T5] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 567.787348][ T4896] cdc_ncm 1-1:1.0: bind() failure [ 567.797374][ T4896] cdc_ncm 1-1:1.1: bind() failure [ 567.808620][ T4896] usb 1-1: USB disconnect, device number 38 [ 567.828327][ T5] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 567.836625][ T5] usb 3-1: config 0 has no interface number 0 [ 567.843004][ T5] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 4 [ 567.854278][ T5] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8D has invalid maxpacket 2047, setting to 1023 [ 567.865664][ T5] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=5d.80 [ 567.875023][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.885140][ T5] usb 3-1: config 0 descriptor?? [ 567.932009][ T5] usbtouchscreen: probe of 3-1:0.83 failed with error -22 [ 568.128868][ T5] usb 3-1: USB disconnect, device number 15 [ 568.556997][ T2915] usb 1-1: new high-speed USB device number 39 using dummy_hcd 20:58:21 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x46}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x0, 0x4009032, 0xffffffffffffffff, 0x0) close(r0) 20:58:21 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000684c2b10c6050b920034000000010902240001000000000904000002ff053100098400010000000000090400760000000000113ab26aab287c2e7a811ba4ef6c29045f3ad4bae72cf2f3ddc2f6ec06045e2b41c514c1c4c37a5309b06b5bc7fc7c7a3f5e835198625e7d464f3b66d74ea098be10822d841e5dc159ad4cd2a3c3ba1925be9592571f34241c5ac82acd7d9e96aa1c481cde7d614b6f296114f83ef7654fa3e4066152c30b6ad051d493458dca9e10ebc524caf7f9bf12ed4f6fb64ed73582996105c8377858a8d9e7c07e709414db3feeb1667ec9d8dfceefed7ce2b24f2c760ce0a2a316"], 0x0) 20:58:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1f) 20:58:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 20:58:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffff7ffbbfffffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) [ 568.917165][ T2915] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 568.925349][ T2915] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 568.937509][ T2915] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 568.946557][ T2915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.957732][ T2915] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 568.967093][ T4896] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 568.967687][ T2915] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 568.984962][ T2915] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.994163][ T2915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.217056][ T4896] usb 5-1: Using ep0 maxpacket: 16 20:58:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) listen(0xffffffffffffffff, 0x10000000002) semget(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) semget(0x0, 0x0, 0x80) personality(0xffffffffffffffff) 20:58:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 20:58:22 executing program 5: r0 = socket(0x10, 0x800000000000003, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 20:58:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x15, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x10000e0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x2000000000000000}, 0x0) 20:58:22 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x46}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x0, 0x4009032, 0xffffffffffffffff, 0x0) close(r0) [ 569.328294][ T2915] cdc_ncm 1-1:1.0: bind() failure [ 569.357219][ T4896] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 569.370479][ T4896] usb 5-1: config 0 interface 0 has no altsetting 1 20:58:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) [ 569.377667][ T4896] usb 5-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=34.00 [ 569.379388][ T2915] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 569.386915][ T4896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:58:22 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000003a00)=[{&(0x7f0000002740)=""/12, 0xc}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) set_mempolicy(0x8003, &(0x7f0000000300), 0x9) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 20:58:22 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x46}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x0, 0x4009032, 0xffffffffffffffff, 0x0) close(r0) [ 569.529753][ T4896] usb 5-1: config 0 descriptor?? [ 569.568183][ T2915] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 569.584379][ T4896] qmi_wwan 5-1:0.0: skipping garbage [ 569.590126][ T4896] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 569.617571][ T2915] usbtest: probe of 1-1:1.1 failed with error -71 [ 569.702114][T18391] IPVS: ftp: loaded support on port[0] = 21 [ 569.765048][ T2915] usb 1-1: USB disconnect, device number 39 [ 569.777703][ T5] usb 5-1: USB disconnect, device number 16 [ 570.086359][T18391] IPVS: ftp: loaded support on port[0] = 21 [ 570.547133][ T4896] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 570.787023][ T4896] usb 5-1: Using ep0 maxpacket: 16 [ 570.907388][ T4896] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 570.920720][ T4896] usb 5-1: config 0 interface 0 has no altsetting 1 [ 570.928366][ T4896] usb 5-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=34.00 [ 570.938042][ T4896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.952408][ T4896] usb 5-1: config 0 descriptor?? [ 570.999216][ T4896] qmi_wwan 5-1:0.0: skipping garbage [ 571.004845][ T4896] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 571.198678][ T30] usb 5-1: USB disconnect, device number 17 20:58:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect(r1, 0x0, 0x0) memfd_create(0x0, 0x0) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x2) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000e40)={{0x0, 0x0, 0x0, 0x0, '\x00', 0x5ba78a22}, 0x0, [0xbbe, 0x4, 0x8, 0x401, 0x0, 0x2, 0x2, 0xffffffff, 0x0, 0x0, 0xfffffffffffff001, 0x2, 0x5, 0x200, 0x42b3, 0x0, 0x3, 0x8000, 0x4, 0x0, 0x3, 0x3d58, 0x0, 0x9, 0x1ff, 0x800, 0x6, 0x0, 0x5, 0x5, 0x7f, 0x1, 0x1000, 0x7ff, 0x3f, 0x0, 0x0, 0x4, 0x1c26000000, 0xf0, 0x3, 0x7, 0x7f, 0x0, 0x400, 0x9, 0x0, 0x3fffc00000, 0x5, 0x80, 0x0, 0x9, 0x1ff, 0x10001, 0x3, 0x1, 0x4, 0x9, 0xfffffffffffff37c, 0x8, 0x0, 0xb6, 0x6, 0x0, 0x1, 0x81, 0x7fffffff, 0x2, 0x6, 0x40, 0x9, 0x0, 0xc04, 0x0, 0x5, 0x6, 0x6b, 0x1, 0x40, 0x0, 0xf9dc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffffffffffa, 0xc6, 0xe32, 0xc7a, 0x0, 0x0, 0x7, 0x8, 0x8000, 0xa5, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x5, 0x10001, 0x0, 0xffffffffffffe2ed, 0x0, 0x0, 0x0, 0x9, 0x1, 0xffffffffffffff00, 0x2, 0x9, 0x2, 0x0, 0x6, 0x0, 0x0, 0x4, 0x96b7], {0x0, 0x1c9c380}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, &(0x7f0000000340)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000100)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r3, &(0x7f0000000040)=[{0x300, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 20:58:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0x7f, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0x314}}], 0x400000000000440, 0x2, 0x0) 20:58:24 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x46}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x0, 0x4009032, 0xffffffffffffffff, 0x0) close(r0) 20:58:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10}}) 20:58:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) listen(0xffffffffffffffff, 0x10000000002) semget(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) semget(0x0, 0x0, 0x80) personality(0xffffffffffffffff) 20:58:24 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000003a00)=[{&(0x7f0000002740)=""/12, 0xc}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) set_mempolicy(0x8003, &(0x7f0000000300), 0x9) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) [ 571.800388][T18413] IPVS: ftp: loaded support on port[0] = 21 20:58:25 executing program 2: process_vm_writev(0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/163, 0xa3}], 0x2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0xf4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev}}, {0x14}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0xf4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0x274}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0xae}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 20:58:25 executing program 3: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @local}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x5, 0x40000b}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 20:58:25 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) unshare(0x24020400) unshare(0x24020400) r1 = socket$unix(0x1, 0x3, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 20:58:25 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendfile(r1, r1, 0x0, 0xffff) 20:58:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0x7f, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0x314}}], 0x400000000000440, 0x2, 0x0) 20:58:25 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000003a00)=[{&(0x7f0000002740)=""/12, 0xc}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) set_mempolicy(0x8003, &(0x7f0000000300), 0x9) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 20:58:25 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x10, &(0x7f0000000040)={0x2}, 0x8) 20:58:25 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3f000002}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0x0, 0x2, 0x3, 'queue0\x00'}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @ioapic={0x0, 0x0, 0x3ff}}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x401}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0xe8) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 20:58:25 executing program 4: mbind(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x1, &(0x7f0000000080)=0xf5, 0x4, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x7ffffffe, 0x40, 0x0) [ 572.748525][T18460] sctp: [Deprecated]: syz-executor.3 (pid 18460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.748525][T18460] Use struct sctp_sack_info instead 20:58:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) listen(0xffffffffffffffff, 0x10000000002) semget(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) semget(0x0, 0x0, 0x80) personality(0xffffffffffffffff) 20:58:25 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x48, 0x100200000000000a, 0x0, "6987fc5a11e774c84a09000000000000002748f8e06c00"}) 20:58:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0x7f, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0x314}}], 0x400000000000440, 0x2, 0x0) 20:58:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e22, @multicast1=0xe0000300}, 0x10) [ 573.101820][T18472] IPVS: ftp: loaded support on port[0] = 21 20:58:26 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:58:26 executing program 4: r0 = socket(0x10, 0x400000000080803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f00000001c0)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24) 20:58:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e22, @multicast1=0xe0000300}, 0x10) 20:58:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x40, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfe47bf070") sendto(r0, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) 20:58:26 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1ffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000003a00)=[{&(0x7f0000002740)=""/12, 0xc}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) set_mempolicy(0x8003, &(0x7f0000000300), 0x9) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000200)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00'/203, 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 20:58:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0x7f, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x110000104e20, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0xc0, 0x0, 0x0, 0x0, 0x314}}], 0x400000000000440, 0x2, 0x0) 20:58:26 executing program 4: r0 = socket(0x10, 0x400000000080803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f00000001c0)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24) 20:58:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e22, @multicast1=0xe0000300}, 0x10) 20:58:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) listen(0xffffffffffffffff, 0x10000000002) semget(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) semget(0x0, 0x0, 0x80) personality(0xffffffffffffffff) 20:58:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x40, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfe47bf070") sendto(r0, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) 20:58:27 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 20:58:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e22, @multicast1=0xe0000300}, 0x10) 20:58:27 executing program 4: r0 = socket(0x10, 0x400000000080803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f00000001c0)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24) [ 574.255363][T18523] IPVS: ftp: loaded support on port[0] = 21 20:58:27 executing program 3: perf_event_open(&(0x7f0000000100)={0x2000000008, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:58:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x40, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfe47bf070") sendto(r0, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) 20:58:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000001e00)) [ 574.490339][T18534] input: syz1 as /devices/virtual/input/input36 20:58:27 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x1c, 0x0, [@guehdr={0x4020, 0x0, 0x0, 0x0, 0x0, [0x0]}, @guehdr], "4ea29b4b3ab06ffa"}}}}}, 0x0) 20:58:27 executing program 4: r0 = socket(0x10, 0x400000000080803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f00000001c0)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24) 20:58:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4000000000005}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000000)=0x40, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfe47bf070") sendto(r0, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) [ 574.991469][T18540] input: syz1 as /devices/virtual/input/input37 20:58:28 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x28, 0x8f, 0x7c, 0x8, 0xc45, 0x8003, 0xcfd8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x0, 0x24, 0x5f, 0x6d}}]}}]}}, 0x0) 20:58:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000300)="390000001300030486fe0704000000000000ff3f0b000000450001070000001419001a000a000a00050008000300000800005d14a4e91ee438", 0x39}], 0x1) 20:58:28 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) membarrier(0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r1, 0x0, "ed6121", "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"}}, 0x110) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) 20:58:28 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000000c0)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0011000000", 0x24) 20:58:28 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x4000000000000a, 0x20}}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000400)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) [ 575.402757][T18565] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 575.424296][T18561] IPVS: ftp: loaded support on port[0] = 21 20:58:28 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000080)='./file0/bus/../file0\x00') mkdir(&(0x7f00000000c0)='./file0/bus/../file0\x00', 0x0) [ 575.537052][ T30] usb 2-1: new high-speed USB device number 37 using dummy_hcd 20:58:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000003c0)={[{0x0, 'c\x88d\x00\x00\x02\x00\x00\x00\f\x1b\xd1c\x0fK\x9c\xdd\xbbh\x00W#\x01n(\xa7\xf10s\xb2\xc3\xe0\xa6\xfd\xe7\x80\x03\x8e\xaadkt\xea\xf4\xa9\x15QQ9@h\x94\xf3\x1a\b\x19C@P\'\xe3\xec\xb2\x81\r\x03$\xc3~\xaa\x9a\x18\x15?\x86\xee\xab\xeeQpM\x9e$\x1a\xf0\x93\xf9\xf4\xe2\x85M\x89H\xd4_\xc07\x9c}\xc7\x89\x16\xae\xcb\xdf\xd7\r9\xce)/6\rz\x1f\xd7\xe1i)9\xb3!\xe4~\xc0\xd1<\xce\xf6\x0e\x1dx\v\x8a\xfd\x13\xc5\xc3@\x10\xc0\x18Q\xbf5\r\xc6\xd2\x17M\xbb\xb3\xca\"\x93Q\x98\xe2\xadk\xaa\xdd\x02\xc8\xe5\xe2\x13}\xf3\v\xfe\xc7\x1a'}]}, 0xb4de) [ 575.623524][T18570] device nr0 entered promiscuous mode 20:58:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x14, 0x7, @ipv6=@mcast2}]}, 0x28}}, 0x0) 20:58:28 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) unshare(0x400) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) [ 575.777088][ T30] usb 2-1: Using ep0 maxpacket: 8 20:58:28 executing program 5: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x400000000000007, 0x0, 0x1, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x80ffff, 0x5f], 0x0, 0xffffffffffffffff, 0x1, 0x200}, 0x3c) [ 575.803219][T18581] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 20:58:29 executing program 3: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) close(r1) r2 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000021ff4)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000040)) [ 575.899193][ T30] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 575.907653][ T30] usb 2-1: config 0 has no interface number 0 [ 575.913864][ T30] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=cf.d8 [ 575.923290][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:58:29 executing program 4: unshare(0x40600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8048ae66, 0x0) [ 575.967480][ T30] usb 2-1: config 0 descriptor?? [ 576.037495][ T30] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 576.165786][T18600] IPVS: ftp: loaded support on port[0] = 21 [ 576.192912][T18576] device nr0 entered promiscuous mode [ 576.217604][ T30] gspca_sn9c2028: read1 error -71 [ 576.243309][ T30] gspca_sn9c2028: read1 error -71 [ 576.269224][ T30] gspca_sn9c2028: read1 error -71 [ 576.287335][ T30] sn9c2028: probe of 2-1:0.39 failed with error -71 [ 576.320033][ T30] usb 2-1: USB disconnect, device number 37 [ 577.007109][ T30] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 577.246979][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 577.367348][ T30] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 577.376669][ T30] usb 2-1: config 0 has no interface number 0 [ 577.383195][ T30] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=cf.d8 [ 577.392411][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.402932][ T30] usb 2-1: config 0 descriptor?? [ 577.461552][ T30] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 577.667156][ T30] gspca_sn9c2028: read1 error -71 [ 577.688241][ T30] gspca_sn9c2028: read1 error -71 [ 577.707304][ T30] gspca_sn9c2028: read1 error -71 [ 577.712755][ T30] sn9c2028: probe of 2-1:0.39 failed with error -71 [ 577.722176][ T30] usb 2-1: USB disconnect, device number 38 20:58:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x805, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) 20:58:31 executing program 5: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x400000000000007, 0x0, 0x1, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x80ffff, 0x5f], 0x0, 0xffffffffffffffff, 0x1, 0x200}, 0x3c) 20:58:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x14, 0x0, 0x1ff) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) 20:58:31 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001400197f09004b0101048c590188ffffcf3d34740600d4ff5bffff00e7e5ed7d00000000c8550000000000002758d60034650c0326356cdb47f6aaaa956086cbfe0db35200af4486", 0x4c}], 0x1) 20:58:31 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200), 0x0) 20:58:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x48, &(0x7f0000000100)={@initdev}, 0x20) 20:58:31 executing program 5: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x400000000000007, 0x0, 0x1, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x80ffff, 0x5f], 0x0, 0xffffffffffffffff, 0x1, 0x200}, 0x3c) 20:58:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newrule={0x3c, 0x20, 0x503, 0x0, 0x0, {0x2, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @broadcast}]}, 0x3c}}, 0x0) 20:58:31 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/568]}, 0x2b0) 20:58:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000000) 20:58:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_destroy(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x5}}, 0x28) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) 20:58:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000140)={0x0, 0x37a, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736671002c00020028000100000000000000000000000000000000000000000000000000000097000000000000000000025bd9bbcebcb5bfca8f483983f0eddc029e7d78db5b429b9b8687143547846f32fe7d462cad59f2adc40a163a1bda37015192eea2e17c10b4fd2d1cc9cafc216ec0548ade89018000008f9b9d04c029ede9a30304913a997549caeaaeaa3b36e8425c73025b531b919047cdba8f846a785b3014ffc7a7aca04d760f80f0bf4c2cca6cbffcceefafa11b727c80377f9ba10ceb9b3db404bc42"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x2c, 0x2c, 0x1, 0x0, 0x0, {0x0, r6, {}, {}, {0x0, 0xfff6}}, [{0x8, 0xb, 0x81}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:58:31 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xd0, 0x9d, 0x8c, 0x8, 0x91e, 0x3, 0xe5c4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6d, 0x0, 0x2, 0x61, 0x9, 0xf5, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x8}}, {{0x9, 0x5, 0x1, 0x1e, 0x8}}]}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:58:31 executing program 5: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x400000000000007, 0x0, 0x1, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x80ffff, 0x5f], 0x0, 0xffffffffffffffff, 0x1, 0x200}, 0x3c) 20:58:31 executing program 2: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{}, {0x0, 0xffffffffffffffff}}, 0x0) 20:58:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto(r0, &(0x7f0000000040), 0xfe4c, 0x0, 0x0, 0x8b) 20:58:31 executing program 2: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{}, {0x0, 0xffffffffffffffff}}, 0x0) 20:58:32 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)=0xffffff80, 0x4) ioctl$RTC_UIE_OFF(r0, 0x7004) [ 578.939050][ T2915] usb 1-1: new high-speed USB device number 40 using dummy_hcd 20:58:32 executing program 5: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x5) ptrace$cont(0x420e, r0, 0x2, 0x717000) 20:58:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}}) 20:58:32 executing program 2: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{}, {0x0, 0xffffffffffffffff}}, 0x0) [ 579.197020][ T2915] usb 1-1: Using ep0 maxpacket: 8 [ 579.329427][ T2915] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 579.338733][ T2915] usb 1-1: config 0 has no interface number 0 [ 579.345013][ T2915] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 579.356331][ T2915] usb 1-1: config 0 interface 109 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 579.366431][ T2915] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=e5.c4 20:58:32 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000021eeaa08b5192100dc400900000109021b0001000000000904000001930000000600950fb6b0404d95237b214f36324d98ea91ff2bbee2ecaed06e548a115f9e6b3982daa0abfc42eb31bd9d08eee05a4d4ce3a138ce788efac5c8386cdc2925ae1b99a5cc8dc0504a11339fab32421dffef965d43d1a78dc2189032b2800135ec3f5bb2123abb"], 0x0) [ 579.375764][ T2915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.562752][ T2915] usb 1-1: config 0 descriptor?? 20:58:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_destroy(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x5}}, 0x28) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) 20:58:32 executing program 2: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{}, {0x0, 0xffffffffffffffff}}, 0x0) [ 579.620750][ T2915] garmin_gps 1-1:0.109: Garmin GPS usb/tty converter detected [ 579.661773][ T2915] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 579.768069][ T30] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 579.844448][ T2915] usb 1-1: USB disconnect, device number 40 [ 579.864641][ T2915] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 579.875918][ T2915] garmin_gps 1-1:0.109: device disconnected [ 580.067130][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 580.187151][ T30] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 580.197958][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.287230][ T30] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=40.dc [ 580.296675][ T30] usb 2-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 580.304991][ T30] usb 2-1: Manufacturer: syz [ 580.310995][ T30] usb 2-1: config 0 descriptor?? [ 580.595559][ T30] usb 2-1: USB disconnect, device number 39 [ 580.628125][ T17] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 580.866953][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 580.988027][ T17] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 580.996374][ T17] usb 1-1: config 0 has no interface number 0 [ 581.002715][ T17] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 581.013954][ T17] usb 1-1: config 0 interface 109 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 581.024164][ T17] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=e5.c4 [ 581.033308][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.043438][ T17] usb 1-1: config 0 descriptor?? [ 581.089764][ T17] garmin_gps 1-1:0.109: Garmin GPS usb/tty converter detected [ 581.102990][ T17] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 581.289732][ T17] usb 1-1: USB disconnect, device number 41 [ 581.299755][ T17] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 581.310713][ T17] garmin_gps 1-1:0.109: device disconnected [ 581.319048][ T30] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 581.567108][ T30] usb 2-1: Using ep0 maxpacket: 8 20:58:34 executing program 2: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000200)="6e0100000000faff0012aa", 0xb}]) 20:58:34 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, 0x0, 0x0) 20:58:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_destroy(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x5}}, 0x28) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) 20:58:34 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 20:58:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) io_destroy(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x5}}, 0x28) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100)) ptrace(0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) 20:58:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2}, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 20:58:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x1, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979295204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x0, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) 20:58:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000140)) 20:58:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500fd08000000000000000002000000"], 0x14}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:58:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) sendmsg$sock(r3, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="de", 0x1}], 0x1}, 0x0) dup2(r1, r3) dup3(r1, r2, 0x0) 20:58:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000400)="f6", 0x1}], 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x116) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 20:58:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:58:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) sendmsg$sock(r3, &(0x7f0000000100)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="de", 0x1}], 0x1}, 0x0) dup2(r1, r3) dup3(r1, r2, 0x0) 20:58:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RSYMLINK(r2, &(0x7f0000000180)={0x14}, 0x10000015a) 20:58:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000140)) 20:58:36 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd1\x00=*w\x81\x93:jO\xfc\xb4lLD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/177) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/221, 0xdd}], 0x1, 0x14b) 20:58:36 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(0x0, 0x0, 0x100) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) 20:58:36 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0x17c, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000540)=ANY=[@ANYBLOB="0300001d3baa7a"]) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x3, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000780)=""/4096, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:36 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd1\x00=*w\x81\x93:jO\xfc\xb4lLD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/177) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/221, 0xdd}], 0x1, 0x14b) 20:58:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000140)) 20:58:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x1, @dev={0xfe, 0x80, [], 0x1e}}}, 0x0, 0x2, 0x0, "60fccbfc69597f563301068efeb3dbd80a2b6b17fb1a0ba8e257830e896c8a03c189d3430b96147e604d0e500889bf5c75472ccaeb378feb93abfc99d82c5dfaf22ea189ea636925cd000000f5ff00"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000340)='\t', 0x1, 0x200400cf, 0x0, 0x0) 20:58:37 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(0x0, 0x0, 0x100) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) 20:58:37 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd1\x00=*w\x81\x93:jO\xfc\xb4lLD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/177) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/221, 0xdd}], 0x1, 0x14b) 20:58:37 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000140)) 20:58:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000140)=""/163) 20:58:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RSYMLINK(r2, &(0x7f0000000180)={0x14}, 0x10000015a) 20:58:37 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(0x0, 0x0, 0x100) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) 20:58:37 executing program 4: socketpair$unix(0x1, 0x100000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) inotify_init() io_setup(0x41, &(0x7f00000006c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000005, 0x0, r0, 0x0}]) 20:58:37 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd1\x00=*w\x81\x93:jO\xfc\xb4lLD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/177) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/221, 0xdd}], 0x1, 0x14b) 20:58:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000300)='/dev/md0\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r3) 20:58:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x1, @dev={0xfe, 0x80, [], 0x1e}}}, 0x0, 0x2, 0x0, "60fccbfc69597f563301068efeb3dbd80a2b6b17fb1a0ba8e257830e896c8a03c189d3430b96147e604d0e500889bf5c75472ccaeb378feb93abfc99d82c5dfaf22ea189ea636925cd000000f5ff00"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000340)='\t', 0x1, 0x200400cf, 0x0, 0x0) 20:58:37 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}, 0x10) 20:58:37 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = open(0x0, 0x0, 0x100) ioctl$TCSETAF(r1, 0x5408, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) 20:58:38 executing program 4: syz_usb_connect(0x0, 0x40, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x65, 0x83, 0x74, 0x200008, 0x1630, 0x42, 0xcc20, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@usb_cdc={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, '3'}]}]}}]}}]}}, 0x0) 20:58:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r5}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}]}, 0x38}}, 0x0) 20:58:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x0, 0x0) memfd_create(&(0x7f0000000940)='I\x00=', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/ptmx\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002380)='/dev/ptmx\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000023c0), 0x8, 0x0) socket$unix(0x1, 0x3, 0x0) eventfd(0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000002540)='/proc/self/attr/exec\x00', 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000002580)='/dev/hwrng\x00', 0x0, 0x0) eventfd2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='I\x00=', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') write(r1, &(0x7f0000000180)="6963e6424304006da3a74e3deec6fc5bb9650b5de56946c568f95d22c77190ba406d59a5958def156c9c8a2ac4677afffffffc800000000000200000f8bf54da32", 0x41) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30}, 0x25) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) 20:58:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x1, @dev={0xfe, 0x80, [], 0x1e}}}, 0x0, 0x2, 0x0, "60fccbfc69597f563301068efeb3dbd80a2b6b17fb1a0ba8e257830e896c8a03c189d3430b96147e604d0e500889bf5c75472ccaeb378feb93abfc99d82c5dfaf22ea189ea636925cd000000f5ff00"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000340)='\t', 0x1, 0x200400cf, 0x0, 0x0) [ 585.334760][ T30] usb 5-1: new high-speed USB device number 18 using dummy_hcd 20:58:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RSYMLINK(r2, &(0x7f0000000180)={0x14}, 0x10000015a) 20:58:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x1, @dev={0xfe, 0x80, [], 0x1e}}}, 0x0, 0x2, 0x0, "60fccbfc69597f563301068efeb3dbd80a2b6b17fb1a0ba8e257830e896c8a03c189d3430b96147e604d0e500889bf5c75472ccaeb378feb93abfc99d82c5dfaf22ea189ea636925cd000000f5ff00"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xd}, 0x1c) sendto$inet6(r1, &(0x7f0000000340)='\t', 0x1, 0x200400cf, 0x0, 0x0) 20:58:38 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2715, 0x0, &(0x7f000033bffc)) 20:58:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$ndb(&(0x7f0000000400)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) close(r1) 20:58:38 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") writev(r1, &(0x7f0000000100)=[{&(0x7f0000000800)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 585.587794][ T30] usb 5-1: Using ep0 maxpacket: 8 20:58:38 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="06", 0x1) r2 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x221, 0xfffffffffffffffb) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:58:38 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000b82000)={0x40000007}) dup2(r0, r1) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x0) 20:58:38 executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x28, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@eol, @exp_fastopen={0xfe, 0x10, 0xf989, "dba403f3a37313252d2ce567"}]}}}}}}}}, 0x0) [ 585.785276][ T30] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 585.793752][ T30] usb 5-1: config 0 has no interface number 0 [ 585.800128][ T30] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=cc.20 [ 585.809732][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.823742][ T30] usb 5-1: config 0 descriptor?? [ 585.882528][ T30] usb 5-1: bad CDC descriptors [ 585.893151][ T30] usb 5-1: bad CDC descriptors [ 586.071361][ T30] usb 5-1: USB disconnect, device number 18 [ 586.857079][ T30] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 587.096941][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 587.217076][ T30] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 587.226145][ T30] usb 5-1: config 0 has no interface number 0 [ 587.233133][ T30] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=cc.20 [ 587.242383][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.251775][ T30] usb 5-1: config 0 descriptor?? [ 587.300046][ T30] usb 5-1: bad CDC descriptors [ 587.306560][ T30] usb 5-1: bad CDC descriptors [ 587.498972][ T30] usb 5-1: USB disconnect, device number 19 20:58:41 executing program 4: syz_usb_connect(0x0, 0x40, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x65, 0x83, 0x74, 0x200008, 0x1630, 0x42, 0xcc20, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@usb_cdc={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, '3'}]}]}}]}}]}}, 0x0) 20:58:41 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001740)=@newlink={0x24, 0x12, 0x1, 0x0, 0x0, {0x7d0a}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}}, 0x0) 20:58:41 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x218d0b2cb70a0aef, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) getsockname$packet(r2, 0x0, &(0x7f0000000300)) 20:58:41 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'team_slave_0\x00', &(0x7f0000002080)=@ethtool_per_queue_op={0x4b, 0x1d}}) 20:58:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000329e4540be0632a23ea60000000109021200010000000009043c0000eaedc30007877ab942c167facefffe036fd792ea3925b7a65cabdb7716864bf41c0a6c5edf8d35a7442052812c59fe06dbdf82738cdcff6ef5261be1551b28cd97e98c42e9c54851bfb600b4532879ad2f1eadfb3c3543744dadd1a2afb85e798b3b00"/140], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000002c0), 0x0, 0x0}) 20:58:41 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") writev(r1, &(0x7f0000000100)=[{&(0x7f0000000800)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:58:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0xa1, 0x0, 0x0, 0x1, 0x73, 0x0, 0x0}) 20:58:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8, 0x5}], @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r4}]]}}}]}, 0x40}}, 0x0) 20:58:41 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x8d, &(0x7f0000000140), &(0x7f0000000040)=0xc6) [ 588.188436][T18940] usb usb4: usbfs: process 18940 (syz-executor.3) did not claim interface 1 before use 20:58:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0xa1, 0x0, 0x0, 0x1, 0x73, 0x0, 0x0}) [ 588.321116][T18946] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 588.347812][ T30] usb 5-1: new high-speed USB device number 20 using dummy_hcd 20:58:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0xf9fd7d27e2a49d0c}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 588.378982][ T2915] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 588.389876][T18951] usb usb4: usbfs: process 18951 (syz-executor.3) did not claim interface 1 before use 20:58:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f013cf1660f3a086d492f0f01c2c4c19171f1750f092e0f79346b362ef30f7ed5ea0001c0fe9700f36c0fc75f01", 0x2e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xd8, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 588.587538][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 588.714948][ T30] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 588.723697][ T30] usb 5-1: config 0 has no interface number 0 [ 588.730822][ T30] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=cc.20 [ 588.740043][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.777544][ T2915] usb 3-1: config 0 has an invalid interface number: 60 but max is 0 [ 588.785944][ T2915] usb 3-1: config 0 has no interface number 0 [ 588.792499][ T2915] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=a6.3e [ 588.801861][ T2915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.833686][ T30] usb 5-1: config 0 descriptor?? [ 588.853765][ T2915] usb 3-1: config 0 descriptor?? [ 588.883475][ T30] usb 5-1: bad CDC descriptors [ 588.894329][ T30] usb 5-1: bad CDC descriptors [ 589.085677][T11800] usb 5-1: USB disconnect, device number 20 [ 589.347322][ T2915] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 589.359551][ T2915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 589.387654][ T2915] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 589.396691][ T2915] usb 3-1: media controller created [ 589.424589][ T2915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. 20:58:42 executing program 4: syz_usb_connect(0x0, 0x40, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x65, 0x83, 0x74, 0x200008, 0x1630, 0x42, 0xcc20, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@usb_cdc={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, '3'}]}]}}]}}]}}, 0x0) 20:58:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0xa1, 0x0, 0x0, 0x1, 0x73, 0x0, 0x0}) 20:58:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 20:58:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x5}]}, 0x20}}, 0x0) [ 589.557099][ T2915] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 589.565184][ T2915] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 589.648244][T18975] usb usb4: usbfs: process 18975 (syz-executor.3) did not claim interface 1 before use [ 589.761711][ T2915] usb 3-1: USB disconnect, device number 16 [ 589.825408][ T2915] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 589.907084][ T30] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 590.146971][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 590.267211][ T30] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 590.275491][ T30] usb 5-1: config 0 has no interface number 0 [ 590.282524][ T30] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=cc.20 [ 590.291776][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.301096][ T30] usb 5-1: config 0 descriptor?? [ 590.339754][ T30] usb 5-1: bad CDC descriptors [ 590.346199][ T30] usb 5-1: bad CDC descriptors [ 590.543828][T11800] usb 5-1: USB disconnect, device number 21 [ 590.577285][ T2915] usb 3-1: new high-speed USB device number 17 using dummy_hcd 20:58:44 executing program 2: unshare(0x2000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x40405515, &(0x7f0000000200)={{0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 20:58:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0xa1, 0x0, 0x0, 0x1, 0x73, 0x0, 0x0}) 20:58:44 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") writev(r1, &(0x7f0000000100)=[{&(0x7f0000000800)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:58:44 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) 20:58:44 executing program 5: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3f000002}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000100)={0x0, 0x2, 0x3, 'queue0\x00'}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x401}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, 0xe8) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 20:58:44 executing program 4: syz_usb_connect(0x0, 0x40, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x65, 0x83, 0x74, 0x200008, 0x1630, 0x42, 0xcc20, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@usb_cdc={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, '3'}]}]}}]}}]}}, 0x0) [ 591.367490][ T2915] usb 3-1: device descriptor read/all, error -71 [ 591.373964][T18996] usb usb4: usbfs: process 18996 (syz-executor.3) did not claim interface 1 before use 20:58:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x7}}, 0xb8}}, 0x0) 20:58:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r2, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) socket$packet(0x11, 0x2, 0x300) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0xfffffffffffffccd, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x8, 0xfffffffffffffffe}}}, 0x90) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r7) sendfile(r0, r1, 0x0, 0x102000002) 20:58:44 executing program 3: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe5e, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00\x00\x00\x04\x00', @ifru_flags}) 20:58:44 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, &(0x7f0000000300)={0x2, 0x1004e20, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 591.638207][ T30] usb 5-1: new high-speed USB device number 22 using dummy_hcd 20:58:44 executing program 3: ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3000}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc8, &(0x7f0000000040)) [ 591.717339][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 591.724249][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:58:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x1114ffd, 0x0, &(0x7f00000000c0), 0x0, 0x0) 20:58:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2}, 0x8) [ 591.877113][ T30] usb 5-1: Using ep0 maxpacket: 8 20:58:45 executing program 2: unshare(0x400) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)) [ 592.000115][ T30] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 592.008617][ T30] usb 5-1: config 0 has no interface number 0 [ 592.015064][ T30] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=cc.20 [ 592.024858][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.142250][ T30] usb 5-1: config 0 descriptor?? [ 592.198280][ T30] usb 5-1: bad CDC descriptors [ 592.220487][ T30] usb 5-1: bad CDC descriptors 20:58:45 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") writev(r1, &(0x7f0000000100)=[{&(0x7f0000000800)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:58:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0xffffffffffffffda, &(0x7f0000001680)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) mkdir(&(0x7f0000000bc0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, &(0x7f0000000480)) 20:58:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r2, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) socket$packet(0x11, 0x2, 0x300) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0xfffffffffffffccd, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x8, 0xfffffffffffffffe}}}, 0x90) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r7) sendfile(r0, r1, 0x0, 0x102000002) [ 592.372461][T19052] proc: Unknown parameter '00000000000000001 1 0000000C 0 [ 592.372461][T19052] 3 gre0 ff010000000000000000000000000001 1 00000008 0 [ 592.372461][T19052] 4 gretap0 ff0200000000000000000001ffaaaa10 1 00000004 0 [ 592.372461][T19052] 4 gretap0 ff0200000000000000000001ff000010 1 00000004 0 [ 592.372461][T19052] 4 gretap0 ff020000000000000000000000000001 1 0000000C 0 [ 592.372461][T19052] 4 gretap0 ff010000000000000000000000000001 1 00000008 0 [ 592.372461][T19052] 5 erspan0 ff0200000000000000000001ffaaaa16 1 00000004 0 [ 592.372461][T19052] 5 erspan0 ff0200000000000000000001ff000016 1 00000004 0 [ 592.372461][T19052] 5 erspan0 ff020000000000000000000000000001 1 0000000C 0 [ 592.372461][T19052] 5 erspan0 ff010000000000000000000000000001 1 00000008 0 [ 592.372461][T19052] 6 ip_vti0 ff020000000000000000000000000001 1 0000000C 0 [ 592.376714][T19052] proc: Unknown parameter '00000000000000001 1 0000000C 0 [ 592.376714][T19052] 3 gre0 ff010000000000000000000000000001 1 00000008 0 [ 592.376714][T19052] 4 gretap0 ff0200000000000000000001ffaaaa10 1 00000004 0 [ 592.376714][T19052] 4 gretap0 ff0200000000000000000001ff000010 1 00000004 0 [ 592.376714][T19052] 4 gretap0 ff020000000000000000000000000001 1 0000000C 0 [ 592.376714][T19052] 4 gretap0 ff010000000000000000000000000001 1 00000008 0 [ 592.376714][T19052] 5 erspan0 ff0200000000000000000001ffaaaa16 1 00000004 0 [ 592.376714][T19052] 5 erspan0 ff0200000000000000000001ff000016 1 00000004 0 [ 592.376714][T19052] 5 erspan0 ff020000000000000000000000000001 1 0000000C 0 [ 592.376714][T19052] 5 erspan0 ff010000000000000000000000000001 1 00000008 0 [ 592.376714][T19052] 6 ip_vti0 ff020000000000000000000000000001 1 0000000C 0 [ 592.568988][ T30] usb 5-1: USB disconnect, device number 22 20:58:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2}, 0x8) 20:58:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x64, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 20:58:46 executing program 3: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname(r0, &(0x7f00000002c0)=@can, &(0x7f0000000100)=0x80) 20:58:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r2, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) socket$packet(0x11, 0x2, 0x300) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0xfffffffffffffccd, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x8, 0xfffffffffffffffe}}}, 0x90) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r7) sendfile(r0, r1, 0x0, 0x102000002) 20:58:46 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000100)=0x20) 20:58:46 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_PRIORITY(r0, 0xc0506107, 0x800000000709000) 20:58:46 executing program 2: futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000180), 0x32ffffff) 20:58:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2}, 0x8) [ 593.467504][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 593.474335][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:58:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x10000000000004}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0xa9, 0x0) 20:58:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x44000102, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000002000000ae96e47cda9c6b16ce50c5a746de448100"/35], 0x8) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20:58:46 executing program 3: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) set_mempolicy(0x2, &(0x7f0000000000)=0x3, 0x201) 20:58:46 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f000081e000)={0x0, 0x2}, 0x8) 20:58:46 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x60, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x77585805}, @md5sig={0x13, 0x2, "e7b607b04bf357d2762136ab4f236218"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x6, "9dd59663"}]}}}}}}}}, 0x0) 20:58:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@known='trusted.overlay.upper\x00') r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r2, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) socket$packet(0x11, 0x2, 0x300) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0xfffffffffffffccd, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x8, 0xfffffffffffffffe}}}, 0x90) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r7) sendfile(r0, r1, 0x0, 0x102000002) [ 593.895853][T19105] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:58:47 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d6f43020200e010173170000000109021b0001000000000904000001a9686225894ae210290baa64ab9aa8c4e8000905091e0000000000"], 0x0) 20:58:47 executing program 3: prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xa) 20:58:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x44000102, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000002000000ae96e47cda9c6b16ce50c5a746de448100"/35], 0x8) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20:58:47 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x60, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x77585805}, @md5sig={0x13, 0x2, "e7b607b04bf357d2762136ab4f236218"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x6, "9dd59663"}]}}}}}}}}, 0x0) [ 594.187506][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 594.195647][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:58:47 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) pipe(&(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0)={0x45}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) 20:58:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x44000102, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000002000000ae96e47cda9c6b16ce50c5a746de448100"/35], 0x8) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 594.353038][ T30] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 594.597211][ T30] usb 6-1: Using ep0 maxpacket: 32 20:58:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:58:47 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x60, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x77585805}, @md5sig={0x13, 0x2, "e7b607b04bf357d2762136ab4f236218"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x6, "9dd59663"}]}}}}}}}}, 0x0) 20:58:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x100000001) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) 20:58:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@fragment, 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x44000102, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000002000000ae96e47cda9c6b16ce50c5a746de448100"/35], 0x8) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000080)=0x800, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20:58:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x8000400) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fcntl$addseals(r0, 0x40b, 0x4000000000008) [ 594.717462][ T30] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 594.728396][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.741864][ T30] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 594.751606][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.814751][ T30] usb 6-1: config 0 descriptor?? 20:58:47 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x60, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x77585805}, @md5sig={0x13, 0x2, "e7b607b04bf357d2762136ab4f236218"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x6, "9dd59663"}]}}}}}}}}, 0x0) [ 595.097289][ T30] usb 6-1: string descriptor 0 read error: -71 [ 595.134192][ T30] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 595.142886][ T30] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 595.176769][ T30] usb 6-1: USB disconnect, device number 22 [ 595.857135][ T2915] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 596.107068][ T2915] usb 6-1: Using ep0 maxpacket: 32 [ 596.247155][ T2915] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 596.259172][ T2915] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 596.274741][ T2915] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 596.284345][ T2915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.294326][ T2915] usb 6-1: config 0 descriptor?? [ 596.577424][ T2915] usb 6-1: string descriptor 0 read error: -71 [ 596.589504][ T2915] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 596.596893][ T2915] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 596.609680][ T2915] usb 6-1: USB disconnect, device number 23 20:58:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x100000001) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) 20:58:50 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000180)={@local, @empty=[0xf000, 0xe000000000000000, 0x0, 0xf0ffff, 0x15000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x0, [@broadcast, @broadcast, @multicast1, @dev]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [{}, {}]}, @generic={0x0, 0x7, "bbcbf993b5"}, @rr={0x7, 0x3}]}}}}}}}, 0x0) 20:58:50 executing program 1: unshare(0x20400) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 20:58:50 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x6) 20:58:50 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d6f43020200e010173170000000109021b0001000000000904000001a9686225894ae210290baa64ab9aa8c4e8000905091e0000000000"], 0x0) 20:58:50 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x19, 0x8, 0x7f}}) [ 597.120659][T19171] rtc_cmos 00:00: Alarms can be up to one day in the future 20:58:50 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce3ad20012009335e8a000000010902240001000000000904b300020cc1470009058d02000000000009050f000000000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e40)={0x0, 0x0, 0x1, "be"}, 0x0, 0x0, 0x0, 0x0}) 20:58:50 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x19, 0x342) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000008dc0)=[{&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}], 0x1, 0x0) 20:58:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x315, 0x0, 0x0, 0xffffff68) 20:58:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001c008104e00f80ecdb4cb91a02c804a001000000810040fb12000100040eda1b40d819a906000500000f", 0x223}], 0x1, 0x0, 0x0, 0x10}, 0x0) 20:58:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x100000001) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) 20:58:50 executing program 4: sysinfo(&(0x7f0000000000)=""/22) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), 0x1000000000000324, 0x0, 0xfffffffffffffdfc}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\x00\x00\x00\x00)\x00', @ifru_flags}) 20:58:50 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x80000004}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 20:58:50 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5, 0x7c, 0x4f, 0x10, 0x424, 0x12c, 0x8af3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x1, 0x3, 0x42, 0x35, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x63}}]}}]}}]}}, 0x0) [ 597.428171][ T2915] usb 6-1: new high-speed USB device number 24 using dummy_hcd 20:58:50 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions']) open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) 20:58:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x100000001) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x42, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffff) [ 597.657178][ T30] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 597.677492][ T2915] usb 6-1: Using ep0 maxpacket: 32 [ 597.801774][ T2915] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 597.812845][ T2915] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.826982][ T2915] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 597.837116][ T2915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.851699][ T2915] usb 6-1: config 0 descriptor?? [ 597.917138][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 597.948574][ T4896] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 598.047278][ T30] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 598.056244][ T30] usb 1-1: config 0 has no interface number 0 [ 598.062669][ T30] usb 1-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 598.073729][ T30] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 598.084383][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.094111][ T30] usb 1-1: config 0 descriptor?? [ 598.137299][ T2915] usb 6-1: string descriptor 0 read error: -71 [ 598.156157][ T2915] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 598.163722][ T2915] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 598.193630][ T2915] usb 6-1: USB disconnect, device number 24 [ 598.237311][ T4896] usb 3-1: Using ep0 maxpacket: 16 [ 598.347180][ T30] rtl8192cu: Chip version 0x10 [ 598.367410][ T4896] usb 3-1: config 0 has an invalid interface number: 170 but max is 0 [ 598.375920][ T4896] usb 3-1: config 0 has no interface number 0 [ 598.383510][ T4896] usb 3-1: config 0 interface 170 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 598.397145][ T4896] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=8a.f3 [ 598.408428][ T4896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.421538][ T4896] usb 3-1: config 0 descriptor?? [ 598.471856][ T4896] usb 3-1: probing VID:PID(0424:012C) [ 598.478550][ T4896] usb 3-1: vub300 testing UNKNOWN EndPoint(0) 85 [ 598.486759][ T4896] usb 3-1: vub300 ignoring EndPoint(0) 85 [ 598.493500][ T4896] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 598.502662][ T4896] vub300: probe of 3-1:0.170 failed with error -22 20:58:51 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d6f43020200e010173170000000109021b0001000000000904000001a9686225894ae210290baa64ab9aa8c4e8000905091e0000000000"], 0x0) 20:58:51 executing program 4: sysinfo(&(0x7f0000000000)=""/22) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), 0x1000000000000324, 0x0, 0xfffffffffffffdfc}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\x00\x00\x00\x00)\x00', @ifru_flags}) [ 598.577191][ T30] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 598.673952][ T17] usb 3-1: USB disconnect, device number 19 [ 598.947040][ T4896] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 598.977154][ T30] rtl_usb: reg 0xfe66, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 599.177157][ T30] rtl_usb: reg 0xfe67, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 599.187350][ T30] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 599.199870][ T4896] usb 6-1: Using ep0 maxpacket: 32 [ 599.207668][ T30] usb 1-1: USB disconnect, device number 42 [ 599.327188][ T4896] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 599.339788][ T4896] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.353687][ T4896] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 599.366941][ T4896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.376958][ T4896] usb 6-1: config 0 descriptor?? [ 599.466997][ T2915] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 599.657332][ T4896] usb 6-1: string descriptor 0 read error: -71 [ 599.671962][ T4896] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 599.681150][ T4896] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 599.694893][ T4896] usb 6-1: USB disconnect, device number 25 [ 599.717037][ T30] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 599.737434][ T2915] usb 3-1: Using ep0 maxpacket: 16 [ 599.857299][ T2915] usb 3-1: config 0 has an invalid interface number: 170 but max is 0 [ 599.866555][ T2915] usb 3-1: config 0 has no interface number 0 [ 599.873023][ T2915] usb 3-1: config 0 interface 170 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 599.884517][ T2915] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=8a.f3 [ 599.893725][ T2915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.905977][ T2915] usb 3-1: config 0 descriptor?? [ 599.957103][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 599.962151][ T2915] usb 3-1: probing VID:PID(0424:012C) [ 599.970637][ T2915] usb 3-1: vub300 testing UNKNOWN EndPoint(0) 85 [ 599.978288][ T2915] usb 3-1: vub300 ignoring EndPoint(0) 85 [ 599.984695][ T2915] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 599.992861][ T2915] vub300: probe of 3-1:0.170 failed with error -22 [ 600.097178][ T30] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 600.109678][ T30] usb 1-1: config 0 has no interface number 0 [ 600.115997][ T30] usb 1-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 600.126255][ T30] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 600.137493][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.149465][ T30] usb 1-1: config 0 descriptor?? [ 600.159312][ T2915] usb 3-1: USB disconnect, device number 20 20:58:53 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce3ad20012009335e8a000000010902240001000000000904b300020cc1470009058d02000000000009050f000000000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e40)={0x0, 0x0, 0x1, "be"}, 0x0, 0x0, 0x0, 0x0}) 20:58:53 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions']) open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) 20:58:53 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) close(r0) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 20:58:53 executing program 4: sysinfo(&(0x7f0000000000)=""/22) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), 0x1000000000000324, 0x0, 0xfffffffffffffdfc}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\x00\x00\x00\x00)\x00', @ifru_flags}) 20:58:53 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d6f43020200e010173170000000109021b0001000000000904000001a9686225894ae210290baa64ab9aa8c4e8000905091e0000000000"], 0x0) 20:58:53 executing program 3: socket$inet(0x2, 0x80001, 0x84) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 20:58:53 executing program 4: sysinfo(&(0x7f0000000000)=""/22) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), 0x1000000000000324, 0x0, 0xfffffffffffffdfc}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x00\x00\x00\x00\x00)\x00', @ifru_flags}) [ 600.548229][ T30] rtl_usb: reg 0xf0, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 600.557257][ T30] rtl8192cu: Chip version 0x10 20:58:53 executing program 2: r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 600.718654][ T4896] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 600.757593][ T30] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 20:58:53 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) utime(&(0x7f0000000080)='./file0/../file0\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 20:58:53 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'team_slave_0\x00', &(0x7f0000002080)=@ethtool_per_queue_op={0x4b, 0x1b}}) 20:58:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)) [ 600.967319][ T4896] usb 6-1: Using ep0 maxpacket: 32 [ 601.088244][ T4896] usb 6-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 601.106731][ T4896] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.127476][ T4896] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 601.140832][ T4896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:58:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 601.207925][ T30] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 601.314087][ T30] usb 1-1: USB disconnect, device number 43 [ 601.398107][ T4896] usb 6-1: config 0 descriptor?? [ 601.677507][ T4896] usb 6-1: string descriptor 0 read error: -71 [ 601.689197][ T4896] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 601.697697][ T4896] pegasus_notetaker: probe of 6-1:0.0 failed with error -22 [ 601.722659][ T4896] usb 6-1: USB disconnect, device number 26 [ 601.739010][ T30] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 601.987127][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 602.107387][ T30] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 602.122892][ T30] usb 1-1: config 0 has no interface number 0 [ 602.133051][ T30] usb 1-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 602.150782][ T30] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 602.161957][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.174375][ T30] usb 1-1: config 0 descriptor?? [ 602.437020][ T30] rtl8192cu: Chip version 0x10 [ 602.657135][ T30] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 603.257157][ T30] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 603.274981][ T30] usb 1-1: USB disconnect, device number 44 20:58:56 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce3ad20012009335e8a000000010902240001000000000904b300020cc1470009058d02000000000009050f000000000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e40)={0x0, 0x0, 0x1, "be"}, 0x0, 0x0, 0x0, 0x0}) 20:58:56 executing program 4: r0 = semget$private(0x0, 0x2000000010a, 0x0) semop(r0, &(0x7f0000000080)=[{0x4, 0x6}, {0x4}], 0x2) semop(r0, &(0x7f0000000100)=[{0x0, 0xffffffff}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 20:58:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions']) open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) 20:58:56 executing program 3: socket$inet(0x2, 0x80001, 0x84) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 20:58:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:56 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f00000007c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000280)="e0", 0x1}], 0x1}, 0x0) 20:58:56 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x8000000}) 20:58:56 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000000)="180c1007a914fa550ff68792", 0xc}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 20:58:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:58:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) listen(r0, 0x0) [ 603.867324][T19282] syz-executor.3: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=syz3,mems_allowed=0-1 [ 603.878155][ T30] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 603.891835][T19282] CPU: 0 PID: 19282 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 603.914360][T19282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.926974][T19282] Call Trace: [ 603.931406][T19282] dump_stack+0x191/0x1f0 [ 603.936476][T19282] warn_alloc+0x4e4/0x710 [ 603.940942][T19282] __alloc_pages_nodemask+0x5ca0/0x5fa0 [ 603.946644][T19282] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 603.952787][T19282] ? cpuset_nodemask_valid_mems_allowed+0x5b/0xd0 [ 603.959277][T19282] alloc_pages_current+0x68d/0x9a0 [ 603.964559][T19282] ion_page_pool_alloc+0x6db/0x830 [ 603.969759][T19282] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 603.975738][T19282] ion_system_heap_allocate+0x47f/0x1400 [ 603.981475][T19282] ? ion_system_contig_heap_create+0x210/0x210 [ 603.987785][T19282] ion_ioctl+0x775/0x2250 [ 603.992235][T19282] ? debug_shrink_set+0x220/0x220 [ 603.997328][T19282] do_vfs_ioctl+0xea8/0x2c50 [ 604.002017][T19282] ? security_file_ioctl+0x1bd/0x200 [ 604.011587][T19282] __se_sys_ioctl+0x1da/0x270 [ 604.016376][T19282] __x64_sys_ioctl+0x4a/0x70 [ 604.021565][T19282] do_syscall_64+0xbc/0xf0 [ 604.027484][T19282] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 604.033463][T19282] RIP: 0033:0x459a59 [ 604.037529][T19282] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 604.057535][T19282] RSP: 002b:00007fab38df6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.065986][T19282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 604.074108][T19282] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 604.082239][T19282] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 604.090611][T19282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab38df76d4 [ 604.098650][T19282] R13: 00000000004c2772 R14: 00000000004d6180 R15: 00000000ffffffff [ 604.106881][T19282] Mem-Info: [ 604.110119][T19282] active_anon:122614 inactive_anon:203 isolated_anon:50 [ 604.110119][T19282] active_file:11037 inactive_file:15041 isolated_file:0 [ 604.110119][T19282] unevictable:0 dirty:185 writeback:0 unstable:0 [ 604.110119][T19282] slab_reclaimable:5032 slab_unreclaimable:15023 [ 604.110119][T19282] mapped:58914 shmem:253 pagetables:1716 bounce:0 [ 604.110119][T19282] free:710282 free_pcp:391 free_cma:0 20:58:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 604.149320][T19282] Node 0 active_anon:490220kB inactive_anon:796kB active_file:44004kB inactive_file:59252kB unevictable:0kB isolated(anon):36kB isolated(file):128kB mapped:235620kB dirty:720kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 421888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 604.179107][T19282] Node 0 DMA free:13956kB min:216kB low:268kB high:320kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.207298][T19282] lowmem_reserve[]: 0 2738 3428 3428 [ 604.212769][T19282] Node 0 DMA32 free:125392kB min:112380kB low:122040kB high:131700kB active_anon:481940kB inactive_anon:16kB active_file:25200kB inactive_file:56936kB unevictable:0kB writepending:392kB present:3129332kB managed:2809036kB mlocked:0kB kernel_stack:5504kB pagetables:5284kB bounce:0kB free_pcp:1260kB local_pcp:0kB free_cma:0kB [ 604.244026][T19282] lowmem_reserve[]: 0 0 690 690 20:58:57 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,default_permissions']) open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) [ 604.249202][T19282] Node 0 Normal free:15856kB min:15884kB low:18316kB high:20748kB active_anon:8240kB inactive_anon:780kB active_file:19308kB inactive_file:1248kB unevictable:0kB writepending:328kB present:786432kB managed:706752kB mlocked:0kB kernel_stack:12096kB pagetables:1176kB bounce:0kB free_pcp:508kB local_pcp:0kB free_cma:0kB [ 604.279352][T19282] lowmem_reserve[]: 0 0 0 0 [ 604.283968][T19282] Node 0 DMA: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 2*4096kB (M) = 13956kB [ 604.300146][T19282] Node 0 DMA32: 16393*4kB (UME) 2181*8kB (UM) 1036*16kB (UM) 515*32kB (UM) 111*64kB (UM) 14*128kB (U) 9*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 130860kB [ 604.318542][T19282] Node 0 Normal: 2137*4kB (UM) 553*8kB (UME) 89*16kB (UM) 42*32kB (UM) 9*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16444kB [ 604.334575][T19282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.344320][T19282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.353967][T19282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.363695][T19282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.373353][T19282] 24634 total pagecache pages [ 604.378380][T19282] 0 pages in swap cache [ 604.383319][T19282] Swap cache stats: add 0, delete 0, find 0/0 [ 604.389618][T19282] Free swap = 0kB [ 604.393403][T19282] Total swap = 0kB [ 604.397306][T19282] 1965979 pages RAM [ 604.401157][T19282] 0 pages HighMem/MovableOnly [ 604.405975][T19282] 330656 pages reserved [ 604.410313][T19282] 0 pages cma reserved [ 604.448192][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 604.569413][ T30] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 604.577948][ T30] usb 1-1: config 0 has no interface number 0 [ 604.585257][ T30] usb 1-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 604.595973][ T30] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 604.607598][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.685753][ T30] usb 1-1: config 0 descriptor?? [ 604.947207][ T30] rtl8192cu: Chip version 0x10 [ 605.167169][ T30] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 605.767134][ T30] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 605.782513][ T30] usb 1-1: USB disconnect, device number 45 20:58:58 executing program 3: socket$inet(0x2, 0x80001, 0x84) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 20:58:58 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce3ad20012009335e8a000000010902240001000000000904b300020cc1470009058d02000000000009050f000000000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e40)={0x0, 0x0, 0x1, "be"}, 0x0, 0x0, 0x0, 0x0}) 20:58:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r2 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000007c0)) 20:58:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0xa}, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xd, 0x35, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 20:58:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000dbb000), &(0x7f0000329000)=0x4) 20:58:58 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2d, 0x0, 0x0, {0x0, @sctp_ip6_spec={@mcast1, @dev}, {0x0, @random="9fc380cd76c3"}, @ether_spec={@random="d56dbed47985", @remote}, {0x0, @broadcast}}}}) 20:58:59 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0, 0x34c}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="c1e0000000002c01a0001fe4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x217}], 0x1}, 0x0) 20:58:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00006ed000), &(0x7f0000000000)=0x4) 20:58:59 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000680), 0x8) 20:58:59 executing program 5: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) [ 606.267405][ T30] usb 1-1: new high-speed USB device number 46 using dummy_hcd 20:58:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) getsockopt$packet_buf(r2, 0x111, 0x5, 0x0, &(0x7f0000000100)) 20:58:59 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="5500000018007fbdb72d23b2a4a280930a0600fec0a8431491000000040008001a000500fec000001900a30700000000000000dc1338d54400009b84136e115afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 606.509555][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 606.541919][T19356] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 606.627188][ T30] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 606.635588][ T30] usb 1-1: config 0 has no interface number 0 [ 606.642012][ T30] usb 1-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 606.652938][ T30] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 606.662205][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.685300][ T30] usb 1-1: config 0 descriptor?? 20:58:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) [ 606.947211][ T30] rtl8192cu: Chip version 0x10 [ 607.167308][ T30] rtlwifi: RTL8XXX did not boot from eeprom, check it !! [ 607.757220][ T30] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 607.768186][ T30] usb 1-1: USB disconnect, device number 46 20:59:00 executing program 4: r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf000) 20:59:00 executing program 3: socket$inet(0x2, 0x80001, 0x84) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffff}) 20:59:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0x4, 0x8, 0x319, 0x0, 0x0, {}, [@nested={0x8, 0x2, [@generic="cf"]}, @typed={0x34, 0x3, @str='keyringeth0vmnet1cgroupppp1[eth0vboxnet1user\x00'}]}, 0x50}}, 0x0) 20:59:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) fallocate(r0, 0x0, 0x0, 0x0) 20:59:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) 20:59:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x155555555555583b, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6901ff007259bca88e485b"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 607.942622][T19368] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 607.953740][T19368] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 20:59:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x277, 0x0, 0x8}]}) 20:59:01 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 20:59:02 executing program 4: unshare(0x20400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x32) 20:59:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x6}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r3, &(0x7f0000481000)=""/128, 0x80) [ 609.032960][T19426] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 609.041336][T19426] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 20:59:02 executing program 1: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="a7999a104850913a9090415bc19fa9a821cd3d1b2d86e79aa7410600000000000000f1bdb301774654181f4979c1cff4c61a7aa079cc9886e6a129afc1291947a6c93dbc9c6f35b909b3af94ed37f6d1406fa35879bbf77f1470924f5862beb335f3f39d00ce51f176c1d5a71270a05de7a1a23fdbe9375938c7d85349f5460c577370a1bd73ed3a6c2bb7f41e9daae94586987f1c420733a3fab6369d733e0441a78ee7cc64801638c2a2cf9728f406f078a8582114082741c43b941441f9898a356d561960d92e5bfe45504ac881fb1407e15f4b566a2598e82999ea36cfc11b39ea03cf4096e122b84c476667320bb8b3d97403448acc6e6f6dbdcbc9"], 0xfe) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) 20:59:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="606b9a974a00000127bd7000ffdbdf17ae1f005d8f023414be080300b302f11cfcdf74dfaf5e4d56cc06b7d7cd00000f000200080001d970"], 0x1}}, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00fb150000adcc94c0ff0000000000000104"], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 20:59:02 executing program 5: mkdir(&(0x7f0000003a80)='./file0\x00', 0x0) lstat(&(0x7f0000003f00)='./file0\x00', &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r0) [ 609.180691][T19436] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 609.189523][T19436] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 20:59:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=[@increfs={0x4008630a}], 0x0, 0x0, 0x0}) 20:59:02 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xf6, 0x6c, 0x27, 0x20, 0x572, 0x58a5, 0xbb89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x3, 0xc3, 0x24, 0x29, 0x0, [], [{{0x9, 0x5, 0x0, 0x3}}, {{0x9, 0x5, 0x0, 0x3}}, {}]}}]}}]}}, 0x0) 20:59:02 executing program 0: r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0x10226) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x101d0) 20:59:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)}, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8c, 0x11, r1, 0x0) r2 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0xc0487c04, &(0x7f0000000000)=""/226) [ 609.488874][T19452] binder: BC_ATTEMPT_ACQUIRE not supported [ 609.495952][T19452] binder: 19450:19452 ioctl c0306201 20000000 returned -22 20:59:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0xffffffffffffffff) 20:59:02 executing program 3: unshare(0x2000400) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/234, 0xea) getdents(r0, 0x0, 0x0) 20:59:02 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b8004f700a04699"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x8000000000005, 0x80f, 0x0, {0x0, 0x7530}, {0x0, 0x7530}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "de79f533823601c0362d0d210a169c22b52e2a3d627edc0642e14a76f3a74e3650381100bd940ba37e57c28939cefaa5839342bb1e5ff3694333cf802f2f9288"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "de7ee32dae8efa5d"}}, 0x48}}, 0x0) 20:59:02 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x3e1) 20:59:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0x4048ae9b, &(0x7f00000001c0)={0x0, 0x0, 0x2080}) [ 609.882700][ T30] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 610.131550][ T30] usb 5-1: Using ep0 maxpacket: 32 20:59:03 executing program 1: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="a7999a104850913a9090415bc19fa9a821cd3d1b2d86e79aa7410600000000000000f1bdb301774654181f4979c1cff4c61a7aa079cc9886e6a129afc1291947a6c93dbc9c6f35b909b3af94ed37f6d1406fa35879bbf77f1470924f5862beb335f3f39d00ce51f176c1d5a71270a05de7a1a23fdbe9375938c7d85349f5460c577370a1bd73ed3a6c2bb7f41e9daae94586987f1c420733a3fab6369d733e0441a78ee7cc64801638c2a2cf9728f406f078a8582114082741c43b941441f9898a356d561960d92e5bfe45504ac881fb1407e15f4b566a2598e82999ea36cfc11b39ea03cf4096e122b84c476667320bb8b3d97403448acc6e6f6dbdcbc9"], 0xfe) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) 20:59:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x25, 0x0, 0x0}) 20:59:03 executing program 0: r0 = memfd_create(&(0x7f00000003c0)='#\'%no\x9d\x05\\\x80\x83~7\x0eu]b\xd6\xbf\xfe\xe1,\xee\xf8Q\xec \xa3\xfe_C\xea\x1c\xac\xd3\xad\xe6\x8f2)t\xda\x9a\x01\xad\x016smQ\x12\x00\x00\x00\x00RA[F\xe1\x1c\xa1O\xe8*K6S>\xe8\xf2e\x14\xd6\xd4\xb6<\x92FD0\xe1\x9d\xf0\xf1\x1d\xd4*\xf7\xee&\xf2K\x9a\xdc\x8e\x98\x91u4\xa5?H<\x82\xa2\xc3c\x82\xa6\x05\x1c\x01\xaaF\xee\x8b\x86\xd0\x81\x1bPP\x98\xd2\x90y\xe6\\*\x1fp\x16hP\xc4\x91\x97jg\xd9U\"\xda\xbezQ]\\\xf2\x84h\xfe\xc5\xf0\xc2/^\xc9p\x96\x90\xdc-\x92\x9ej\x1b\xe3M\xe0\x91\x98\x89E\x91\x88\xa0\a-\'\xe1(;V\x93\xe1\xbdK\xb1~\xef\xdb-V\xc3\xb2\x8d\xc4\xef\xf3q`\xa8\xa2+\xcd;\"\xdd/\xe6\x81YHty\x8cf\x17\xf3\xc44\xa1\xd0\x909\xaaJ0\xe9\xe3{\x92r\x94\xd9v}\xf6\xd1\xe9\t\xa1F\xec\x8fHTB\xd1l\x9a\rQ\x03Q\x85\xc4\x00\x00\x00\x00\x00\x00\xfa\xa9T\xe0\'\x8e\x8e^s#\xec2\x1b\xdfR\x9d\xb7\xa3\x01A\xe75\t,c&\xf5\x82\x90\x85g\xe1h\xbd+\x82)_\xec\x8c\xe6)3\x9e\xcc5\x93\xe7\x8e\x0f\xcei2\x91_\xa7ws\xbe\xba\fX\xf2M\xe5\x1c^v\x8aoX\xa8\x0e\xa3\xc94H\x99\x9a}\xa9\xdcl\xb9\rm\xbcsY^\xf7\xac\xaf\\\xca))x\x9fn\xcf#!\xaakw\x1b\x14\x1d!\xd1\x11\xc7\x80\xa8\x00\xe1t\xaa\x002g]h\xfe\xb9iV\xac\x87\xde\xad\xb3H4o^\xe5X\"bO\xc4\x0e[\a\xd4d\x82\xb4n\rU2\xb7\xed\t!\xb4\x01\x88\xff\xb66\xe4\xd6\x11\xc8@b\x0e\x8b\xb5\xa53\xb3', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) read$alg(r1, &(0x7f0000000080)=""/233, 0xe9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 20:59:03 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)) [ 610.264780][ T30] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 610.273524][ T30] usb 5-1: config 0 has no interface number 0 [ 610.280114][ T30] usb 5-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 610.291728][ T30] usb 5-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 610.302577][ T30] usb 5-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 610.537848][ T30] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=bb.89 [ 610.547618][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.556083][ T30] usb 5-1: Product: syz [ 610.561332][ T30] usb 5-1: Manufacturer: syz [ 610.566022][ T30] usb 5-1: SerialNumber: syz [ 610.596154][ T30] usb 5-1: config 0 descriptor?? [ 610.841122][ T2915] usb 5-1: USB disconnect, device number 23 [ 611.607066][ T2915] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 611.857099][ T2915] usb 5-1: Using ep0 maxpacket: 32 [ 611.987146][ T2915] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 611.995958][ T2915] usb 5-1: config 0 has no interface number 0 [ 612.002483][ T2915] usb 5-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 612.013685][ T2915] usb 5-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 612.024897][ T2915] usb 5-1: config 0 interface 156 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 612.207354][ T2915] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=bb.89 [ 612.221307][ T2915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.231713][ T2915] usb 5-1: Product: syz [ 612.236290][ T2915] usb 5-1: Manufacturer: syz [ 612.242201][ T2915] usb 5-1: SerialNumber: syz [ 612.248193][ T2915] usb 5-1: config 0 descriptor?? 20:59:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000005c0)=[@free_buffer], 0x0, 0x0, 0x0}) 20:59:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x12, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x11, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xd}]}}}]}, 0x3c}}, 0x0) 20:59:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x4, &(0x7f0000000500)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 20:59:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66697371cb6939730200726e75787d6c3177ee76440ad2dedc6f5c20026465762f61646900000000000000"], 0x30) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "78f5515a7c708d05446c211efb288b6388f1aad20378c63e03289b82514635002508f9"}, 0x2e) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2321206b8bb88b46abd07b533304f2ab780c44c96504b78bf0aa77ca59a8001000"/42], 0x2a) write(r0, &(0x7f00000001c0)="18b6e6aa8e22d2497e8d6ca1773a174b23785455e78f082dec8e0d1ee53de1ef71aaeea2ac2b06a75701491066bb2b0f", 0x30) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000"], 0x2a) 20:59:05 executing program 1: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xfe) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) 20:59:05 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000c00)=""/246) r2 = epoll_create(0x80ab7f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r3, r0, 0x0) [ 612.499258][ T2915] usb 5-1: USB disconnect, device number 24 [ 612.589538][T19511] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 20:59:05 executing program 3: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000040)=0x9, 0x7, 0x0) 20:59:05 executing program 4: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x10000000) 20:59:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x12, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x11, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xd}]}}}]}, 0x3c}}, 0x0) 20:59:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x4, &(0x7f0000000500)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 20:59:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000000)='e', 0x1}], 0x1) [ 612.945355][T19537] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 20:59:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000004780)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) tee(r1, 0xffffffffffffffff, 0x8000000, 0x0) 20:59:06 executing program 4: mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8e3000)=nil, 0x8e3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f00008e2fba)="958e392937a186d6306a3615593baa57ff0002060000000000079ab4d5ed5cff03000000000000ffff8dffff080cf4eacc49d4df311e370043159379595d0000000000000093bffffffeffbd03ba89734f4e49fda5060255", 0x58) 20:59:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x12, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x11, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xd}]}}}]}, 0x3c}}, 0x0) [ 613.206307][T19554] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 20:59:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) socket(0x22, 0x2, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x32e) 20:59:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00'}, 0x45c) 20:59:06 executing program 1: mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) socket(0x10, 0x2, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) write$binfmt_script(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xfe) sendfile(r1, r2, 0x0, 0x20000102000007) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000240)={0x8001007, 0x1, 0x1}) 20:59:06 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000000400)=""/91, 0x214) 20:59:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x4, &(0x7f0000000500)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 20:59:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x12, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x11, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xa, 0xd}]}}}]}, 0x3c}}, 0x0) 20:59:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0b268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:59:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00'}, 0x45c) [ 613.723970][T19572] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 20:59:06 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0xf9, 0xec, 0x8, 0x1b3d, 0x1e3, 0x28b, 0x0, 0x0, 0x6, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0x40, 0x76, 0x38}}]}}]}}, 0x0) 20:59:06 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00'}, 0x45c) 20:59:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x4, &(0x7f0000000500)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 20:59:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee1768810003c08040300ecff3f000000030000400000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b7487000"/184, 0xb8) 20:59:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00'}, 0x45c) 20:59:07 executing program 2: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x2}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080), 0x1) [ 614.268902][ T2915] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 614.579595][ T2915] usb 1-1: Using ep0 maxpacket: 8 20:59:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:59:07 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0b268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:59:07 executing program 3: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x16}]}) 20:59:07 executing program 2: r0 = fsopen(&(0x7f00000001c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0xa, 0x0, 0x0, 0x0) [ 614.707522][ T2915] usb 1-1: config 0 has an invalid interface number: 141 but max is 0 [ 614.715943][ T2915] usb 1-1: config 0 has no interface number 0 20:59:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='bridge_slave_0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, &(0x7f0000000040), 0x14) sendmmsg$sock(r0, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80), 0x16}}], 0x2, 0x0) [ 614.820548][ T2915] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01e3, bcdDevice= 2.8b [ 614.830095][ T2915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=6 [ 614.838727][ T2915] usb 1-1: SerialNumber: syz 20:59:07 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x0, {0x0, {0x50, 0x0, 0x3}}}, 0xa0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x0, @multicast1, 0x0, 0x0, 'sh\x00', 0x0, 0x0, 0x6e}, 0x2c) ioctl(r0, 0xc2604110, &(0x7f0000000000)) [ 614.908029][ T2915] usb 1-1: config 0 descriptor?? [ 614.983983][ T2915] ftdi_sio 1-1:0.141: FTDI USB Serial Device converter detected [ 614.993071][ T2915] usb 1-1: Detected FT8U232AM [ 615.021860][ T2915] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 615.182300][ T2915] usb 1-1: USB disconnect, device number 47 [ 615.232834][ T2915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 615.243453][ T2915] ftdi_sio 1-1:0.141: device disconnected [ 615.977027][ T2915] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 616.217034][ T2915] usb 1-1: Using ep0 maxpacket: 8 [ 616.337252][ T2915] usb 1-1: config 0 has an invalid interface number: 141 but max is 0 [ 616.345831][ T2915] usb 1-1: config 0 has no interface number 0 [ 616.427220][ T2915] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01e3, bcdDevice= 2.8b [ 616.436596][ T2915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=6 [ 616.447183][ T2915] usb 1-1: SerialNumber: syz [ 616.453073][ T2915] usb 1-1: config 0 descriptor?? [ 616.509206][ T2915] ftdi_sio 1-1:0.141: FTDI USB Serial Device converter detected [ 616.518263][ T2915] usb 1-1: Detected FT8U232AM [ 616.524808][ T2915] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 616.708624][ T2915] usb 1-1: USB disconnect, device number 48 [ 616.716745][ T2915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 616.727449][ T2915] ftdi_sio 1-1:0.141: device disconnected 20:59:09 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0xf9, 0xec, 0x8, 0x1b3d, 0x1e3, 0x28b, 0x0, 0x0, 0x6, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0x40, 0x76, 0x38}}]}}]}}, 0x0) 20:59:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, 0x0) 20:59:09 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r6]}) r7 = dup2(r1, r6) dup3(r7, r5, 0x0) 20:59:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x142, 0x0, 0x0) 20:59:09 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd6e740581070001000000bf52cf6794a9d3"], 0x0) 20:59:09 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0b268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:59:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20, 0x0, "6d9fff5c8159d8f0277a91a66ea4bb5c417ec419fe639c4e414cb447a61923e3c7f6cd988a3e10567ab380ebe0d92f31481d65542fbbf7f7ac1339bb698d693dce8f15d844f235030cbd1362e737209e"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev}}, 0x0, 0x1, 0x0, "c831879d69268044b177a6dd1769e1d9bff635a26ee983c2ac765ed75442e3c490d0111a7b65eba4762d684bc0c982714dc3935698da41e66e26a4c145d39a2242b70951a75a98c18af14bf8b2605ca2"}, 0xd8) close(r1) 20:59:10 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') writev(r0, &(0x7f00000000c0), 0x20000000000003fa) 20:59:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x3, 0x40000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x400000004000060}}]}]}, 0x2c}}, 0x0) [ 617.288081][ T30] usb 3-1: new high-speed USB device number 21 using dummy_hcd 20:59:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010006}]}) 20:59:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x11, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x11}]}}}]}, 0x3c}}, 0x0) [ 617.362604][T19667] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 617.374017][T19669] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 617.393418][T11802] usb 1-1: new high-speed USB device number 49 using dummy_hcd 20:59:10 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', 0x0, 0x0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/17, 0x11) [ 617.455879][T19671] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 617.464829][T19671] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.537657][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 617.657964][T11802] usb 1-1: Using ep0 maxpacket: 8 [ 617.683001][ T30] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 617.693629][ T30] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.705446][ T30] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 617.714830][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.785432][ T30] hub 3-1:118.0: ignoring external hub [ 617.809371][ T30] cdc_wdm 3-1:118.0: cdc-wdm0: USB WDM device [ 617.820623][T11802] usb 1-1: config 0 has an invalid interface number: 141 but max is 0 [ 617.829257][T11802] usb 1-1: config 0 has no interface number 0 [ 617.907356][T11802] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01e3, bcdDevice= 2.8b [ 617.916951][T11802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=6 [ 617.925036][T11802] usb 1-1: SerialNumber: syz [ 617.931231][T11802] usb 1-1: config 0 descriptor?? [ 617.980204][T11802] ftdi_sio 1-1:0.141: FTDI USB Serial Device converter detected [ 617.989036][T11802] usb 1-1: Detected FT8U232AM [ 617.995318][T11802] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 618.183704][T11802] usb 1-1: USB disconnect, device number 49 [ 618.193476][T11802] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 618.203776][T11802] ftdi_sio 1-1:0.141: device disconnected [ 618.417765][T19650] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 618.657091][T19650] usb 3-1: Using ep0 maxpacket: 8 20:59:11 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0xf9, 0xec, 0x8, 0x1b3d, 0x1e3, 0x28b, 0x0, 0x0, 0x6, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0x40, 0x76, 0x38}}]}}]}}, 0x0) 20:59:11 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000012c0)="0b268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 20:59:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sched_setattr(0x0, &(0x7f0000000080)={0xfffffffffffffda8, 0x0, 0x0, 0xfffffffffffffffc, 0x4000000000021}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffffffffb9, &(0x7f0000000080)) 20:59:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x3d3, 0x0}}, {{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x0}}], 0x17b, 0x20000001) [ 618.762826][T19650] usb 3-1: device firmware changed [ 618.770282][T19650] cdc_wdm 3-1:118.0: Error autopm - -16 [ 618.776293][ T2915] usb 3-1: USB disconnect, device number 21 [ 618.977489][ T2915] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 619.107050][T11800] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 619.236967][ T2915] usb 3-1: Using ep0 maxpacket: 8 [ 619.357084][ T2915] usb 3-1: config 118 has an invalid descriptor of length 116, skipping remainder of the config [ 619.368004][ T2915] usb 3-1: config 118 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.381257][ T2915] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 619.391182][ T2915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.400124][T11800] usb 1-1: Using ep0 maxpacket: 8 [ 619.517166][T11800] usb 1-1: config 0 has an invalid interface number: 141 but max is 0 [ 619.525623][T11800] usb 1-1: config 0 has no interface number 0 [ 619.607304][T11800] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01e3, bcdDevice= 2.8b [ 619.616535][T11800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=6 [ 619.624831][T11800] usb 1-1: SerialNumber: syz [ 619.631094][T11800] usb 1-1: config 0 descriptor?? [ 619.669321][T11800] ftdi_sio 1-1:0.141: FTDI USB Serial Device converter detected [ 619.678827][T11800] usb 1-1: Detected FT8U232AM [ 619.684207][ T2915] usb 3-1: string descriptor 0 read error: -71 [ 619.691384][ T2915] hub 3-1:118.0: ignoring external hub [ 619.698230][ T2915] cdc_wdm: probe of 3-1:118.0 failed with error -22 [ 619.707691][ T2915] usbvision_probe: Hauppauge WinTv-USB found [ 619.713783][ T2915] usbvision 3-1:118.0: interface 0 has 0 endpoints, but must have minimum 2 [ 619.725414][T11800] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 619.759971][ T2915] usb 3-1: USB disconnect, device number 22 [ 619.873438][T11802] usb 1-1: USB disconnect, device number 50 [ 619.883617][T11802] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 619.893985][T11802] ftdi_sio 1-1:0.141: device disconnected [ 620.407182][T11802] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 620.648041][T11802] usb 3-1: Using ep0 maxpacket: 8 [ 620.767335][T11802] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 620.777899][T11802] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.789146][T11802] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 620.798405][T11802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.848121][T11802] hub 3-1:118.0: ignoring external hub [ 620.860538][T11802] cdc_wdm 3-1:118.0: cdc-wdm0: USB WDM device 20:59:18 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd6e740581070001000000bf52cf6794a9d3"], 0x0) 20:59:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) listen(r1, 0x0) close(r1) 20:59:18 executing program 1: unshare(0x40600) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x240900, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) 20:59:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) close(r0) flistxattr(r0, 0x0, 0x0) 20:59:18 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3b, 0xf9, 0xec, 0x8, 0x1b3d, 0x1e3, 0x28b, 0x0, 0x0, 0x6, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0x40, 0x76, 0x38}}]}}]}}, 0x0) 20:59:18 executing program 4: sigaltstack(&(0x7f0000232000/0x3000)=nil, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) [ 625.079770][T19650] cdc_wdm 3-1:118.0: Error autopm - -16 [ 625.085858][ T2915] usb 3-1: USB disconnect, device number 23 20:59:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getgroups(0x2, &(0x7f0000000180)=[0x0, 0xee01]) r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@empty}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x10, &(0x7f0000000180)={0x0, {{0x2, 0x0, @dev}}}, 0x2b5) 20:59:18 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="9e4301000006000000011fe4ac14140ceb", 0x11}], 0x1}, 0x0) 20:59:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/arp\x00') pread64(r0, 0x0, 0xffffffffffffff48, 0x0) 20:59:18 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001e005f0014f9f407000904000200000000000000000000000800010000000000", 0x24) 20:59:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x21, &(0x7f0000000000), 0x8}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) [ 625.431791][T19740] ===================================================== [ 625.438866][T19740] BUG: KMSAN: uninit-value in __skb_get_hash+0x160/0x3f0 [ 625.445905][T19740] CPU: 1 PID: 19740 Comm: syz-executor.1 Not tainted 5.3.0-rc7+ #0 [ 625.453801][T19740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.463964][T19740] Call Trace: [ 625.467272][T19740] dump_stack+0x191/0x1f0 [ 625.471616][T19740] kmsan_report+0x13a/0x2b0 [ 625.476121][T19740] __msan_warning+0x73/0xe0 [ 625.480728][T19740] __flow_hash_from_keys+0x572/0x14e0 [ 625.486102][T19740] ? kmsan_internal_set_origin+0x6a/0xb0 [ 625.491865][T19740] __skb_get_hash+0x160/0x3f0 [ 625.496618][T19740] ip_tunnel_xmit+0x7e9/0x3320 [ 625.501433][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 625.507380][T19740] gre_tap_xmit+0xa73/0xb80 [ 625.511892][T19740] ? gre_tap_init+0x650/0x650 [ 625.516561][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 625.521676][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 625.527632][T19740] sch_direct_xmit+0x56c/0x18c0 [ 625.532516][T19740] __dev_queue_xmit+0x1e53/0x4270 [ 625.537545][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 625.543921][T19740] dev_queue_xmit+0x4b/0x60 [ 625.548510][T19740] br_dev_queue_push_xmit+0x803/0x8e0 [ 625.553892][T19740] __br_forward+0xa60/0xe30 [ 625.558408][T19740] ? fdb_add_hw_addr+0x510/0x510 [ 625.563339][T19740] br_flood+0xb4f/0xfe0 [ 625.567503][T19740] br_dev_xmit+0x134f/0x16e0 [ 625.572096][T19740] ? br_net_exit+0x230/0x230 [ 625.576678][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 625.581793][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 625.587680][T19740] __dev_queue_xmit+0x394d/0x4270 [ 625.592717][T19740] ? llc_sysctl_exit+0x110/0x110 [ 625.597651][T19740] dev_queue_xmit+0x4b/0x60 [ 625.602218][T19740] neigh_resolve_output+0xab7/0xb50 [ 625.607552][T19740] ? neigh_event_ns+0x8a0/0x8a0 [ 625.612473][T19740] ip_finish_output2+0x1a8e/0x25d0 [ 625.617605][T19740] __ip_finish_output+0xaf8/0xda0 [ 625.622641][T19740] ip_finish_output+0x2db/0x420 [ 625.627495][T19740] ip_output+0x541/0x610 [ 625.631775][T19740] ? ip_mc_finish_output+0x6d0/0x6d0 [ 625.637080][T19740] ? ip_finish_output+0x420/0x420 [ 625.642131][T19740] ip_local_out+0x164/0x1d0 [ 625.646657][T19740] iptunnel_xmit+0x85d/0xdc0 [ 625.651409][T19740] ip_tunnel_xmit+0x2c3e/0x3320 [ 625.656307][T19740] ipgre_xmit+0xff3/0x1120 [ 625.660749][T19740] ? ipgre_close+0x240/0x240 [ 625.665339][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 625.670524][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 625.676436][T19740] __dev_queue_xmit+0x394d/0x4270 [ 625.681480][T19740] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 625.686767][T19740] dev_queue_xmit+0x4b/0x60 [ 625.691283][T19740] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 625.696649][T19740] packet_sendmsg+0x82d7/0x92e0 [ 625.701497][T19740] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 625.707567][T19740] ? aa_label_sk_perm+0x6d6/0x940 [ 625.712687][T19740] ? kmsan_internal_set_origin+0x6a/0xb0 [ 625.718350][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 625.724253][T19740] ? aa_sk_perm+0x730/0xaf0 [ 625.728813][T19740] ? compat_packet_setsockopt+0x360/0x360 [ 625.734618][T19740] ___sys_sendmsg+0x14ff/0x1590 [ 625.739497][T19740] ? __fget_light+0x6b1/0x710 [ 625.744185][T19740] __se_sys_sendmsg+0x305/0x460 [ 625.749054][T19740] __x64_sys_sendmsg+0x4a/0x70 [ 625.753827][T19740] do_syscall_64+0xbc/0xf0 [ 625.758241][T19740] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 625.764121][T19740] RIP: 0033:0x459a59 [ 625.768353][T19740] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 625.787958][T19740] RSP: 002b:00007f8bef974c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.796364][T19740] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 625.804327][T19740] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 625.812303][T19740] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 625.820289][T19740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8bef9756d4 [ 625.828259][T19740] R13: 00000000004c7b62 R14: 00000000004dd8c0 R15: 00000000ffffffff [ 625.836319][T19740] [ 625.838637][T19740] Uninit was stored to memory at: [ 625.843656][T19740] kmsan_internal_chain_origin+0xd2/0x170 [ 625.849365][T19740] kmsan_memcpy_memmove_metadata+0x25b/0x2d0 [ 625.855351][T19740] kmsan_memcpy_metadata+0xb/0x10 [ 625.860385][T19740] __msan_memcpy+0x56/0x70 [ 625.864798][T19740] __skb_flow_dissect+0x30db/0x7930 [ 625.869993][T19740] __skb_get_hash+0x135/0x3f0 [ 625.874665][T19740] ip_tunnel_xmit+0x7e9/0x3320 [ 625.879435][T19740] gre_tap_xmit+0xa73/0xb80 [ 625.883980][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 625.889217][T19740] sch_direct_xmit+0x56c/0x18c0 [ 625.894061][T19740] __dev_queue_xmit+0x1e53/0x4270 [ 625.899103][T19740] dev_queue_xmit+0x4b/0x60 [ 625.903614][T19740] br_dev_queue_push_xmit+0x803/0x8e0 [ 625.908983][T19740] __br_forward+0xa60/0xe30 [ 625.913500][T19740] br_flood+0xb4f/0xfe0 [ 625.917646][T19740] br_dev_xmit+0x134f/0x16e0 [ 625.922250][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 625.927362][T19740] __dev_queue_xmit+0x394d/0x4270 [ 625.932374][T19740] dev_queue_xmit+0x4b/0x60 [ 625.937387][T19740] neigh_resolve_output+0xab7/0xb50 [ 625.942593][T19740] ip_finish_output2+0x1a8e/0x25d0 [ 625.947699][T19740] __ip_finish_output+0xaf8/0xda0 [ 625.952721][T19740] ip_finish_output+0x2db/0x420 [ 625.957567][T19740] ip_output+0x541/0x610 [ 625.961805][T19740] ip_local_out+0x164/0x1d0 [ 625.966300][T19740] iptunnel_xmit+0x85d/0xdc0 [ 625.970971][T19740] ip_tunnel_xmit+0x2c3e/0x3320 [ 625.975811][T19740] ipgre_xmit+0xff3/0x1120 [ 625.980221][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 625.985332][T19740] __dev_queue_xmit+0x394d/0x4270 [ 625.990517][T19740] dev_queue_xmit+0x4b/0x60 [ 625.995024][T19740] packet_sendmsg+0x82d7/0x92e0 [ 626.000037][T19740] ___sys_sendmsg+0x14ff/0x1590 [ 626.004888][T19740] __se_sys_sendmsg+0x305/0x460 [ 626.009747][T19740] __x64_sys_sendmsg+0x4a/0x70 [ 626.014505][T19740] do_syscall_64+0xbc/0xf0 [ 626.018915][T19740] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 626.024797][T19740] [ 626.027115][T19740] Uninit was stored to memory at: [ 626.032133][T19740] kmsan_internal_chain_origin+0xd2/0x170 [ 626.037839][T19740] kmsan_memcpy_memmove_metadata+0x25b/0x2d0 [ 626.043904][T19740] kmsan_memcpy_metadata+0xb/0x10 [ 626.048930][T19740] __msan_memcpy+0x56/0x70 [ 626.053406][T19740] pskb_expand_head+0x38a/0x19f0 [ 626.058338][T19740] gre_tap_xmit+0x79c/0xb80 [ 626.062855][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 626.067961][T19740] sch_direct_xmit+0x56c/0x18c0 [ 626.072804][T19740] __dev_queue_xmit+0x1e53/0x4270 [ 626.077820][T19740] dev_queue_xmit+0x4b/0x60 [ 626.082318][T19740] br_dev_queue_push_xmit+0x803/0x8e0 [ 626.087674][T19740] __br_forward+0xa60/0xe30 [ 626.092163][T19740] br_flood+0xb4f/0xfe0 [ 626.096308][T19740] br_dev_xmit+0x134f/0x16e0 [ 626.100888][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 626.106021][T19740] __dev_queue_xmit+0x394d/0x4270 [ 626.111031][T19740] dev_queue_xmit+0x4b/0x60 [ 626.115521][T19740] neigh_resolve_output+0xab7/0xb50 [ 626.120728][T19740] ip_finish_output2+0x1a8e/0x25d0 [ 626.125848][T19740] __ip_finish_output+0xaf8/0xda0 [ 626.130881][T19740] ip_finish_output+0x2db/0x420 [ 626.135729][T19740] ip_output+0x541/0x610 [ 626.139962][T19740] ip_local_out+0x164/0x1d0 [ 626.144460][T19740] iptunnel_xmit+0x85d/0xdc0 [ 626.149058][T19740] ip_tunnel_xmit+0x2c3e/0x3320 [ 626.153912][T19740] ipgre_xmit+0xff3/0x1120 [ 626.158324][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 626.163432][T19740] __dev_queue_xmit+0x394d/0x4270 [ 626.168454][T19740] dev_queue_xmit+0x4b/0x60 [ 626.172971][T19740] packet_sendmsg+0x82d7/0x92e0 [ 626.177833][T19740] ___sys_sendmsg+0x14ff/0x1590 [ 626.182680][T19740] __se_sys_sendmsg+0x305/0x460 [ 626.187611][T19740] __x64_sys_sendmsg+0x4a/0x70 [ 626.192367][T19740] do_syscall_64+0xbc/0xf0 [ 626.197743][T19740] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 626.203612][T19740] [ 626.205922][T19740] Uninit was stored to memory at: [ 626.212346][T19740] kmsan_internal_chain_origin+0xd2/0x170 [ 626.218246][T19740] kmsan_memcpy_memmove_metadata+0x25b/0x2d0 [ 626.224484][T19740] kmsan_memcpy_metadata+0xb/0x10 [ 626.229964][T19740] __msan_memcpy+0x56/0x70 [ 626.234810][T19740] pskb_expand_head+0x38a/0x19f0 [ 626.240562][T19740] ip_tunnel_xmit+0x2971/0x3320 [ 626.245487][T19740] ipgre_xmit+0xff3/0x1120 [ 626.249907][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 626.255171][T19740] __dev_queue_xmit+0x394d/0x4270 [ 626.260192][T19740] dev_queue_xmit+0x4b/0x60 [ 626.265213][T19740] packet_sendmsg+0x82d7/0x92e0 [ 626.270062][T19740] ___sys_sendmsg+0x14ff/0x1590 [ 626.274916][T19740] __se_sys_sendmsg+0x305/0x460 [ 626.279754][T19740] __x64_sys_sendmsg+0x4a/0x70 [ 626.284512][T19740] do_syscall_64+0xbc/0xf0 [ 626.288917][T19740] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 626.294804][T19740] [ 626.297133][T19740] Uninit was created at: [ 626.301363][T19740] kmsan_internal_poison_shadow+0x53/0x100 [ 626.307633][T19740] kmsan_slab_alloc+0xaa/0x120 [ 626.312731][T19740] __kmalloc_node_track_caller+0xb55/0x1320 [ 626.320664][T19740] __alloc_skb+0x306/0xa10 [ 626.325080][T19740] alloc_skb_with_frags+0x18c/0xa80 [ 626.330283][T19740] sock_alloc_send_pskb+0xafd/0x10a0 [ 626.335657][T19740] packet_sendmsg+0x6785/0x92e0 [ 626.340494][T19740] ___sys_sendmsg+0x14ff/0x1590 [ 626.345504][T19740] __se_sys_sendmsg+0x305/0x460 [ 626.350777][T19740] __x64_sys_sendmsg+0x4a/0x70 [ 626.355526][T19740] do_syscall_64+0xbc/0xf0 [ 626.360028][T19740] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 626.365933][T19740] ===================================================== [ 626.373338][T19740] Disabling lock debugging due to kernel taint [ 626.379490][T19740] Kernel panic - not syncing: panic_on_warn set ... [ 626.386081][T19740] CPU: 1 PID: 19740 Comm: syz-executor.1 Tainted: G B 5.3.0-rc7+ #0 [ 626.395343][T19740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.405399][T19740] Call Trace: [ 626.408688][T19740] dump_stack+0x191/0x1f0 [ 626.413031][T19740] panic+0x3c9/0xc1e [ 626.416937][T19740] kmsan_report+0x2a2/0x2b0 [ 626.421788][T19740] __msan_warning+0x73/0xe0 [ 626.426296][T19740] __flow_hash_from_keys+0x572/0x14e0 [ 626.431660][T19740] ? kmsan_internal_set_origin+0x6a/0xb0 [ 626.437382][T19740] __skb_get_hash+0x160/0x3f0 [ 626.442058][T19740] ip_tunnel_xmit+0x7e9/0x3320 [ 626.446844][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 626.452824][T19740] gre_tap_xmit+0xa73/0xb80 [ 626.457329][T19740] ? gre_tap_init+0x650/0x650 [ 626.461999][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 626.467211][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 626.473105][T19740] sch_direct_xmit+0x56c/0x18c0 [ 626.478138][T19740] __dev_queue_xmit+0x1e53/0x4270 [ 626.483155][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 626.489168][T19740] dev_queue_xmit+0x4b/0x60 [ 626.493661][T19740] br_dev_queue_push_xmit+0x803/0x8e0 [ 626.499043][T19740] __br_forward+0xa60/0xe30 [ 626.503635][T19740] ? fdb_add_hw_addr+0x510/0x510 [ 626.508573][T19740] br_flood+0xb4f/0xfe0 [ 626.512736][T19740] br_dev_xmit+0x134f/0x16e0 [ 626.517460][T19740] ? br_net_exit+0x230/0x230 [ 626.522155][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 626.527364][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 626.533692][T19740] __dev_queue_xmit+0x394d/0x4270 [ 626.538818][T19740] ? llc_sysctl_exit+0x110/0x110 [ 626.544568][T19740] dev_queue_xmit+0x4b/0x60 [ 626.549076][T19740] neigh_resolve_output+0xab7/0xb50 [ 626.554393][T19740] ? neigh_event_ns+0x8a0/0x8a0 [ 626.559614][T19740] ip_finish_output2+0x1a8e/0x25d0 [ 626.565377][T19740] __ip_finish_output+0xaf8/0xda0 [ 626.571116][T19740] ip_finish_output+0x2db/0x420 [ 626.575997][T19740] ip_output+0x541/0x610 [ 626.580244][T19740] ? ip_mc_finish_output+0x6d0/0x6d0 [ 626.585530][T19740] ? ip_finish_output+0x420/0x420 [ 626.590575][T19740] ip_local_out+0x164/0x1d0 [ 626.595089][T19740] iptunnel_xmit+0x85d/0xdc0 [ 626.599702][T19740] ip_tunnel_xmit+0x2c3e/0x3320 [ 626.604588][T19740] ipgre_xmit+0xff3/0x1120 [ 626.609009][T19740] ? ipgre_close+0x240/0x240 [ 626.613592][T19740] dev_hard_start_xmit+0x51a/0xab0 [ 626.618709][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 626.624595][T19740] __dev_queue_xmit+0x394d/0x4270 [ 626.629627][T19740] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 626.634903][T19740] dev_queue_xmit+0x4b/0x60 [ 626.639395][T19740] ? netdev_core_pick_tx+0x4d0/0x4d0 [ 626.644673][T19740] packet_sendmsg+0x82d7/0x92e0 [ 626.649532][T19740] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 626.655590][T19740] ? aa_label_sk_perm+0x6d6/0x940 [ 626.660617][T19740] ? kmsan_internal_set_origin+0x6a/0xb0 [ 626.666242][T19740] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 626.672152][T19740] ? aa_sk_perm+0x730/0xaf0 [ 626.676677][T19740] ? compat_packet_setsockopt+0x360/0x360 [ 626.682384][T19740] ___sys_sendmsg+0x14ff/0x1590 [ 626.687248][T19740] ? __fget_light+0x6b1/0x710 [ 626.691926][T19740] __se_sys_sendmsg+0x305/0x460 [ 626.696800][T19740] __x64_sys_sendmsg+0x4a/0x70 [ 626.701571][T19740] do_syscall_64+0xbc/0xf0 [ 626.705982][T19740] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 626.711860][T19740] RIP: 0033:0x459a59 [ 626.715760][T19740] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 626.735354][T19740] RSP: 002b:00007f8bef974c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.743767][T19740] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 626.751768][T19740] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 626.759759][T19740] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 626.767733][T19740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8bef9756d4 [ 626.775818][T19740] R13: 00000000004c7b62 R14: 00000000004dd8c0 R15: 00000000ffffffff [ 626.785399][T19740] Kernel Offset: disabled [ 626.789781][T19740] Rebooting in 86400 seconds..