{0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xa3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) 15:39:26 executing program 2: unshare(0x20400) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0) poll(&(0x7f0000000580)=[{r0}], 0x1, 0x0) 15:39:27 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\x14Ym1\xa9\xa22\x0fN\xcb\xa2\xba\xe5\xf4\x97\x00\x04\x00\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x3d1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8a, 0x0, &(0x7f0000000000)=0xfffffcf2) 15:39:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getrandom(&(0x7f0000001300)=""/4096, 0x1000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x11, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x64000040) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, "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", 0x6c325851a35b951}, 0x1006) 15:39:27 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000280)=@hat={'permhat ', 0x0, 0x5e, ['permprofile ', '/proc/thread-self/attr/current\x00', 'permprofile ']}, 0x100000266) 15:39:27 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @host, 0x4}, 0x10) 15:39:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getrandom(&(0x7f0000001300)=""/4096, 0x1000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x11, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x64000040) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, "b13e1c20d1764d052a4289a71186ca1abfa7f39eb694f4602948f6585c3542ac42cb2f94b098e98f2bcd6128dab4a71d544e96e01e3a9a3548ee5f554c06d963346edb9d133e86fdd31c21e9aaffeb52f7cd63297b1fd0db1845e12bda3ce00f0cca0e6ac9c42a61e687c24c0553b408359c86c7bfd7a30944ac327f982b011258e85ee00f050c38e73199d07b72b225a96ab0fb5a9ea944a233e46cd4c25aaa0fe04bd9b3203f61a06c8f094563ffa0078e50248ce1acebc03c75069eb1cb20ebbe30ec063f9ebc45290dc4f8b56ebb08d32e4df04785fd385029f766a0b96db6a1b6615de63393fe97082c076a7170d2b1c06ce0627d6acae850c2b95f38b079a352f27bf6f5460078b8e597c1d3bdb5cf9e73f42eec5aea224ab44b94e18e812864faeaf770ba7471f99b07d41d573d1d4c3833fb4410ea36d710bfa66ccdb14a1927a678f873b023e82c341a43704adb37242a67b2a46d02ab7aee23cf3030a2f3dd58eece667b6e9393ee8d36649e37e83b1c73c0ef65b4df6173c1c25324fbb9afa1361dc4275f152deb03d7138a688eb9dc66e7845ce1be5647bf740b0e1dd038120ef1e3e1cf420cf8b723bef771376e433935e4f9096a10c4a969aceaac4791c41f365b274dab49bddf51b22a24c05ceaedcbf45febc927e98f410d38247d7679cee7b0d3041eaebd7821924ad31e7c5137bf87ce1ec537a981779f0a4c57bbbb5c641cfd02e1e3904f48b0be96fc9851b6bc8c4260168eea9d9d111e2777f78a9021d5eb0166e39410bf279656770263ca2fb7ac0e30d5e168f8cf4bc5665d057da939b770568e41d0fcec5d6aac0bf4ae66fb099b786cdce7f6a9bc00b83d8ed72440a9724d4ef8af71c7efbc31397930cdcb99d30502ecbcc7ddb9161ade16a1badbd7ea3c6c65b387b46234c4660c816506a2f76264bba07ecb685532116bd971464b58e3ea0a29c2fa1d49d9c6308806db01326e9a1b6bbb556f6479b29f48718e211d75f08d0fb477ad8dae5aeaad7e176b2c5ae331ef78212e9dd7e506549dc74ffd940dc91d74aee2fa7f28855919c163f443804e2a072ad8add2be84df87e414afcab0f8e6f67d3ebb1778a6798d50233da09d29b95c0da97304b7a025e50a7c89e614c63bc69477bfe0e5ae2c468332d134f9e22b19eb2f01c8e8d5148b9b980f8b9aa0cab9ba89aafe16d6a8cf9cb5ae659d8fba88e2841f3d6ac0c44dd9f03787d357fe31a4f551e247bfb73b1f2aa1e208c36aa90dcfc4da8877967c05fe951716ec2293d79c6083e79061bbe18150e2af1d889bb4e87c7735b0e7b88a3109a906d1bd4bf9b98c2462420ecc4e9f3a274a6678bc56e9aa7f3d64677141f874f35d00d04a1dc83126ccd69a0221305a3a5418ec24e163b165c1e4533c38f3d213de4012aece68ed11e2f42325d6da5eef78ee985f81a7991e3d1ff69188059c292779579418ef81177fa94b43cdd0fbf92d31f0fb592a864ddc98ddd5b49ece865e7c7a6c873169d0eea46c1a44f645b1cfa40849ffb9f5355ab396dc1a875180f17103be63be4e7d1920949c59ba5d47341c176ac307e165b9733ac5cd9e9691f5ecd76b467881b78f217d50903a06c57270f4104fd26d496dd7e08c27209185761882923f6447c73d53a74e28132e6bf97ee4f2df9d03be88653a9a7251d8df247f1a75f91f95886ce317e3c125aa7686eec86708fa72c9b33a664e76c0ed891ff9d840ac121ae3f96d32330a14fd76df19c7ae0434e2103d6e9175da0b6cc7a007a0a18615271771434959de305636cf7fbfdd16239bff7dbc656a702ebd48f9a2b1937cca80604ec525d292bb7337459235ad047c6933b6c81bd966ea60ec863de568a9e6d8e0378916f441e0f8b2b74df49b9b24094fd643413469428a537aed19b72bf9381ebab4cd57400ecad1cf1b792e9610910d02f9a779b009840e3f1a1395a87f1e590c33018be80a3f34bbaf49e415ba7d3858b40788cd19211b8cad3789870fb252f8991d64bff9558a67a2316ec2402c2f9c52de42e6389fc90bc4379f7b899b1a943035d64f20b7766edf08fdfa185d00493031f0d3f9ad7dce841f725c5adcba896a76857918a2f54c8aa2e50f71eda35b8fea3732a02c146201ad9f4b65b7caa09e2a73f72aee1ce428a35489038d5cc859fbd48be8da5d088ccab897a248fe418b89b409ab5507af725f077d264abec5b53667ca06aed03815dd537535a3360a50ca3d09c025b5057362c7cb5a4b99c58ac64fe813f4d7f2cafbc3048835ec43fa68170ec7310342134c9b5ec417763db145555cdd37f24b27b0911d172710b74d3c754aac02b24030166cbf2eccfaf1e909b629b7919db1351cd0167e8b6bddc5ce4b7e13cbf0c095f636427d440d058e7637eb117947fc6a60942d10bd455030ee38fc447fd3e6232efba65def558dcff60274e6b2ad62464b4f767bcfec22c681c12bdabf1fedc3946f45c9a34a9169f79ea60a9d190dcf1ce14957382af602dd134b610b269247f38c3d4e233f2fda399dc4cf09139cff9e9c731f8bf940df3cbdf9355f604bd0f3d3b20a6cfc39a7d9ff74f734750187b30c1a970a432bf7e9417cc87d8dea00c4e1885845e1a59bc6a5487687c5bca514e9dcf372bcdc0fe4a47f3e4ac456b1a812e69f88b2a8a964d946cc102ba6f3a7c965df24653c6384d810cf157c8581d4b40e874aded8d227a25fab9889f02698bf52980f048408de4a96226949eba5d1b7f41fce61ae1ff9388e096646ddda4c222f7b9bffc1d3e5b645b6e248637698f6a5be1dc03ff7aa9f418153beeef9b9d67ac5b6fc888e5adf0db41a6d5cac2b600af3b428a1294f4fdb4cf64ccc254c1c7ef71b9be3afceb797fc9504bc3f3dde217687d47cd445c44bea2b16eacae76f16d868b77065b189bd7c4678f3a5fc99b4d020d42972d010b7a6b22de46b434f2d8ec4f567af2d531817ec81ffa36cc27d073a66d2152f1be2a8dce08e98a00f473f22e680cf0ebdcf37936cee60f99eec69503a15d8e36f8d599b535021693fb52f9dc93e315d6e849bd4bf9d05fb25f0b09de91b73ca4edfbfa04d9262d449eab2be542ea30f316384609efc52ed641a9e32d48e4a57c65e8bfa5c13e769d5402a0b125c17360800bf0da8592a75abe647f1d9b1072942947da82e701308b60ecdcfd40d7b6cf44b443493ef0466790547c0a8e5914484969e52cba3787c41df965f91ed7074cd62a63db7e1c35b8f9ac30521295ae7b9c81143926f1dd36aefdfbcd7056b0d4209cabe113a18c58ecc062df687666725707029a8be3ef5721484bd429bab33fceb76c6a0f079da8819d0d9565f5e4ed45eb531f9501b85b619b5323169b0297b7cedcf6f288225dd5e6a7f52c1b96cd38dd94b2f6b8cfc6dbd7862901a5295dca5ecbae72344f41c4a222bd6711831d265b910d547501116bcfbf3c9e104b446175c4c8a4e56445ca22f9363f0f54858a8eb4a1c43103bca578c5b0ee372efd705a950510dbbfa4f74c8ddb4bbc1f07dd410ebb39c01f4da8a0bad2d3d35df3a12a9fa2daf44c8163d59aba8a7351ecc9fe4cd25b987dba700e73d7174307161adf70db0e7a802d7c9ec1b912ee58b0a35c2c6f40f112d70ab5aa708071379280c9ffbceaf0a4ec45c89ac0bf3ef40538302b685e24574da8bde8654e99eff66c9ad5e6beafa0e48e1c293c53d955980346cbc052d15e5d1f3baed388dfaa72ca089af06ae757466a704b93a0ff13cb5c722f0b872432a4fd4513ed56825b13ddd4d8c02eb624c8358199f52679421ab0e1792869f6b4aea523a1079b3138f1ef761c6df102096eff43ddb23ee668b9cc5161433feb318903b58387c3dae2833a8c770e7c6e27c31a1fca07377fbb07f11911be6192f7518a8d089b89826e48b28f5c8a00784bef9b2f68c90838eb2c9fcaeda4bb76782510082c977a7ecdd5743e9da8f088a3b67a25cfb25db4a709b6cbf5425e7efa8c2e472464606d9ccd2fc0f73cd1d51a5aa19d9caba10be2147f8e1ad763ba45693f9f078b0716cf588142be847ca67dc132c5782fed12b7d95c55a9bcfdfb85cb48698a45621cc2f1c85559617ece7def71486290b0cf8e987e8788e1a13f17e3f24b93ed2009ebe42e3bea9571f98b39b787c107dcada3a36fa1fe93736e74ec34af80a182cf0adf2846577f1d474c9ff1b4b8a2cfe6a2d445029ca77088b9c84be63655d48cbc5f61b18d7cda0d141f2db6bc3c479aa6ca19638e2c37da38768eb8820e5679345d2abe8033318eb952e297e17dacaaee3df7ef1d6cd554e9b1b453c44e3d4e030e25c5f9ed094100f6d9b1dc5dab371436ab252cc4d7fdf8fe4b7f36ab71f2bbe3878217b151664c3b9ae970e473ae164d77f294ca8ad58634ea446880e8327fc7af2a088e39508443a601eaa00742a7d0ad459dcac24a60edcfa6ac9f72f428c2b8dd30b8278e28f25a1a129d23cacd765de4c4aa52819578951bb8e311e8621f627e3463e2562b6dbc8d1c431c240f1424599438b9c94723f79ffd1fa1bc94104e4598bd43244302f86ddbe47ad8671e25f406aa507ba45bdba09841827a697cece002f79ec7cf14488789d754f84818d180bd04a11cb2115441a402bea2be749ef233bcd26ca27df828ada877a893e54ea3e6ea29e62d6e7693af7cbee59ccdb4045d0e6eeec3d8f59205f324a5f7cf5f871929c83ada04bc5d3990288dca5eb312339933ffb1031e05866e1b2d0aad0ca940795458b7d6c8a3750a76e1e6c8ccd48ca542d6c51164431d70c9d35f0f828cdec404a175a44bc2a9651ec5281c0f3aee9e4375f0eb139f58fa4419fddf9ebe2f8f37121a57397e7e830ac097ed375521a68f7cdc471621b769fef40cd19d8d55a82e27bf5b0cc4182359db7c9066e2ee10df279a89e96fcfea225995f065f7f286b8c8ef9b6c82a34df14dda2f737f557578ce5b15944e3149110102d80465c1b436b6bbb16fdc64a9d130ec7644bc162f0e2c5669a9254970a062561e269d85b72b4748d71d88ca20778287bc3b9613043166862f133f366f6361b9e1d040bbcd9728a70fcf3be7ea8fe0f55980ed03f336ec49f7cb6899813acf47d3b2413e7b637b764fcb9003ece75f8a255b9cdc71f80dbbaa7eaa2111b5551feeb7ea31620a2c88897538915abedcd184d57c79d81505985f561820449c330bc3412bffb68c4c743c5a5a3acafcf00d7561a66f70e5835da530ba62f221211e1fefdc1fbc8c05b1b68b7eb2afac6ebbbc0b961b8ef8b27b555ce7641f6601ac19d5f4adb06b40155a2085ff32de5b2c5edd96a01a14d1bb49b58f1fd718bec428043819b8070e46f0215d2153318320754638d9b40a5214784e7c1f80dde05500cfe8e4dff855504e099634fb3d44829453cf4ac8db7e5a4144f96d4508de90ada04240637fd5b261cfbb80c8d9ccdea6c1d3485a85663cff9749133002c7f9c6ea4de1b50fe90dae397f6b5833e943e6c5f60e10d805e97e6869488b857b44d8c94276f668257c223e2e26dff75222d3f304f8a040ce058e1b7b3bc5f0b69c310beea64212ef0a54bc9fb858c25681cee574c532b64d4f8241e0b855f7f79d0a1ea22fc3d9ad5a1658b5c4d9d417e9eae47c81628341172609a8ef8c72fb6e4e48da6a10207e56b727f65c82d49e2dbb44b492e1265c2b28f98980334ccc3abb0cfd15d73c2f38f4c824022aa7a0ac0b7d35eea934d3455d21e8c710474e54bdf29be107ebc00", 0x6c325851a35b951}, 0x1006) [ 1734.393213][ T31] audit: type=1400 audit(1571585967.445:70): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=5880 comm="syz-executor.0" 15:39:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x55, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001480)=ANY=[@ANYBLOB="11000000000000000000b630000000000000000007000000000000000000000000000000000000000000000000000000c9bd490ce28a313b97fa0fcbd4eeb3f82154f88978e6a323b42473273026dfbd26115d32a30100000000000000981b3265"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x4cc]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:39:27 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) setgid(0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x33, &(0x7f0000000000)) ptrace(0x10, r0) 15:39:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001180)=""/4086) 15:39:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0xf, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) [ 1734.778029][ T6036] openvswitch: netlink: Either Ethernet header or EtherType is required. 15:39:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getrandom(&(0x7f0000001300)=""/4096, 0x1000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x11, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x64000040) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, "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", 0x6c325851a35b951}, 0x1006) 15:39:28 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',00000000000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r1, 0x0, r0, 0x0, 0xa3, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x2, 0x0) r3 = dup2(r2, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="150a00000000000000000a00000018000400090001000a726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xfffffed4, 0x0, 0x1, 0x0, 0x0, 0x20020085}, 0x59e2ae21a10f8f6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xa3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) 15:39:28 executing program 2: r0 = open(&(0x7f0000ba0000)='./file0\x00', 0x82dc, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffdffff7fffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0xfffffffffffffffe, 0x0, 0x8) open(&(0x7f0000000180)='./file0\x00', 0x802, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x80000001) 15:39:28 executing program 0: creat(&(0x7f0000000480)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffffffffffc) 15:39:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x55, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001480)=ANY=[@ANYBLOB="11000000000000000000b630000000000000000007000000000000000000000000000000000000000000000000000000c9bd490ce28a313b97fa0fcbd4eeb3f82154f88978e6a323b42473273026dfbd26115d32a30100000000000000981b3265"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x4cc]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:39:28 executing program 1: syz_emit_ethernet(0xfc, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0xffffff89, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff83, 0x8, 0x5, [@loopback]}]}}, @icmp=@timestamp_reply={0x44, 0x4, 0x0, 0x1f4}}}}}, &(0x7f0000000100)) 15:39:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000500}]}]}, 0x24}}, 0x0) 15:39:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000080)=0xffffffffffffff91, 0x257) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000f61000), 0x4e5, 0x2040, 0x0) [ 1735.305634][ T6282] openvswitch: netlink: IP tunnel dst address not specified 15:39:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f00000001c0)={0x20, 0x2, 0x2, 0x40000800000001, 0x0, 0x0, {0x2}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 15:39:28 executing program 4: unshare(0x20020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x1}) [ 1735.479590][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1735.489131][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:39:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0x200}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "8368ad", 0x30, 0x3a, 0x0, @remote, @local, {[], @icmpv6=@pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "80183d", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4}}}}}}}, 0x0) 15:39:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40104593, &(0x7f0000000000)=[0x0, 0x100100000]) 15:39:28 executing program 2: r0 = socket(0x10, 0x1000040000000003, 0x0) write(r0, &(0x7f0000000040)="22000000140067058d000005004c0304020803130100000008000200410a0ee376ab", 0x352) [ 1735.992147][ T6431] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1736.102917][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1736.109411][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:39:29 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',00000000000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r1, 0x0, r0, 0x0, 0xa3, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x2, 0x0) r3 = dup2(r2, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="150a00000000000000000a00000018000400090001000a726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xfffffed4, 0x0, 0x1, 0x0, 0x0, 0x20020085}, 0x59e2ae21a10f8f6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xa3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) 15:39:29 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0xf, {0xfffffffffffffdaa, 0x29, 0x0, 0x0, 0x0, 0x0, "008000", "022000"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000300)={0x0, 0x0, 0x82, {0x82, 0x0, "b24aa67be06392dec5ec2f69d14c0a0dc2760482eef164105b1bf2b7c520b255b46b463f23edcaea567e9a16183e7094d5ef0a11614603f866fea4c5b27c20d604248b2e7af1bcc34c6ad8aa3681ae7e1108283b1db6b33555b8334846248ea81b7da87e439d6de347f215b0c99fd9756e4c0de3270d5ecd9d94ad5c785dc01a"}}, 0x0}, 0x0) 15:39:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x403, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x78}}, 0x0) 15:39:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:39:29 executing program 0: socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, "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", 0x1000}, 0x1006) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @time, {0x5, 0x7fff}, {}, @queue}], 0x30) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 15:39:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x4, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4, @empty}, 0x10) 15:39:29 executing program 1: symlink(&(0x7f0000000240)='..', &(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='devpts\x00E\xe6\xcb\xf6~\x11mS,!\xd7\xc5_\x96j\xc3\xcb\xe8@\x8a\xd7\x0f\xbc\\\xbe\x9b2\xc4\x8cp\xe8\xe2\xdf\xdf\xb6\xc6}\xde\x0e9\xd9\x8b\xf6e\x04g7T:-*w\x88\x9b\xc3\x16(\xfe\xc2=T\xab\xaa\xfe\xca\xf7I>#htW\xeac_\xf5\x0e\xd7\xa2\xe5\x86l\xa8\x00\xd6\xbf\x01B\xbe\xe3h\xab\x15\b\x02 \xcdu\xbf\xfaho>/\xe4\x02+)3\xb6\x8a\xc8\xde\x9f\xb2\x19t\x16\x8b\xd7U\xfc\x97L\xe0\'\xf4\x8e\xd0\x00\x00\x00\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1736.482668][T14387] usb 6-1: new high-speed USB device number 114 using dummy_hcd 15:39:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:39:29 executing program 0: socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, "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", 0x1000}, 0x1006) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @time, {0x5, 0x7fff}, {}, @queue}], 0x30) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 1736.722669][T14387] usb 6-1: Using ep0 maxpacket: 16 [ 1736.875282][T14387] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1736.883865][T14387] usb 6-1: config 0 has no interface number 0 [ 1736.890224][T14387] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1736.899627][T14387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:39:30 executing program 1: symlink(&(0x7f0000000240)='..', &(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='devpts\x00E\xe6\xcb\xf6~\x11mS,!\xd7\xc5_\x96j\xc3\xcb\xe8@\x8a\xd7\x0f\xbc\\\xbe\x9b2\xc4\x8cp\xe8\xe2\xdf\xdf\xb6\xc6}\xde\x0e9\xd9\x8b\xf6e\x04g7T:-*w\x88\x9b\xc3\x16(\xfe\xc2=T\xab\xaa\xfe\xca\xf7I>#htW\xeac_\xf5\x0e\xd7\xa2\xe5\x86l\xa8\x00\xd6\xbf\x01B\xbe\xe3h\xab\x15\b\x02 \xcdu\xbf\xfaho>/\xe4\x02+)3\xb6\x8a\xc8\xde\x9f\xb2\x19t\x16\x8b\xd7U\xfc\x97L\xe0\'\xf4\x8e\xd0\x00\x00\x00\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:39:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1737.017442][T14387] usb 6-1: config 0 descriptor?? 15:39:30 executing program 4: memfd_create(&(0x7f0000000100)='\x00\x96f\x19\"Z\x8a\x01\x0f\nZ\xc7\x16\xa5\\Z:(\xde\x8e~\x9668\xa8\xf3\xad\"cl\x9f\xf2\xd4.\xcb\xb2~\xb7\x16\xbbU4\x02\xa7Q\xa3\xfc\x80\xb1f\xc0\x9aH^\xdbV\xaclo\xc5\x97[\xe0X_\xff6\xbe\x04\x9d\xef\x87\x1f\x920<\xda\xbe\x80\x02i\xb8\xc1G', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getmulticast={0x14}, 0x14}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 15:39:30 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',00000000000040000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r1, 0x0, r0, 0x0, 0xa3, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x2, 0x0) r3 = dup2(r2, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="150a00000000000000000a00000018000400090001000a726f6164636173742d6c696e6b0000"], 0x2c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xfffffed4, 0x0, 0x1, 0x0, 0x0, 0x20020085}, 0x59e2ae21a10f8f6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xa3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) [ 1737.692543][T14387] gtco 6-1:0.219: Collection level already at zero [ 1737.700249][T14387] input: GTCO_CalComp as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.219/input/input253 [ 1737.894523][T26420] usb 6-1: USB disconnect, device number 114 [ 1737.933938][T26420] gtco 6-1:0.219: gtco driver disconnected [ 1738.662491][T26420] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1738.902377][T26420] usb 6-1: Using ep0 maxpacket: 16 [ 1739.022564][T26420] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1739.030902][T26420] usb 6-1: config 0 has no interface number 0 [ 1739.037250][T26420] usb 6-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1739.046436][T26420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.056082][T26420] usb 6-1: config 0 descriptor?? 15:39:32 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2, 0x7fff}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) 15:39:32 executing program 0: socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, "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", 0x1000}, 0x1006) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @time, {0x5, 0x7fff}, {}, @queue}], 0x30) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 15:39:32 executing program 1: symlink(&(0x7f0000000240)='..', &(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='devpts\x00E\xe6\xcb\xf6~\x11mS,!\xd7\xc5_\x96j\xc3\xcb\xe8@\x8a\xd7\x0f\xbc\\\xbe\x9b2\xc4\x8cp\xe8\xe2\xdf\xdf\xb6\xc6}\xde\x0e9\xd9\x8b\xf6e\x04g7T:-*w\x88\x9b\xc3\x16(\xfe\xc2=T\xab\xaa\xfe\xca\xf7I>#htW\xeac_\xf5\x0e\xd7\xa2\xe5\x86l\xa8\x00\xd6\xbf\x01B\xbe\xe3h\xab\x15\b\x02 \xcdu\xbf\xfaho>/\xe4\x02+)3\xb6\x8a\xc8\xde\x9f\xb2\x19t\x16\x8b\xd7U\xfc\x97L\xe0\'\xf4\x8e\xd0\x00\x00\x00\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15:39:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:39:32 executing program 4: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 15:39:32 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000040, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) [ 1739.385384][T26420] gtco 6-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 1739.393696][T26420] gtco: probe of 6-1:0.219 failed with error -5 15:39:32 executing program 1: symlink(&(0x7f0000000240)='..', &(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='devpts\x00E\xe6\xcb\xf6~\x11mS,!\xd7\xc5_\x96j\xc3\xcb\xe8@\x8a\xd7\x0f\xbc\\\xbe\x9b2\xc4\x8cp\xe8\xe2\xdf\xdf\xb6\xc6}\xde\x0e9\xd9\x8b\xf6e\x04g7T:-*w\x88\x9b\xc3\x16(\xfe\xc2=T\xab\xaa\xfe\xca\xf7I>#htW\xeac_\xf5\x0e\xd7\xa2\xe5\x86l\xa8\x00\xd6\xbf\x01B\xbe\xe3h\xab\x15\b\x02 \xcdu\xbf\xfaho>/\xe4\x02+)3\xb6\x8a\xc8\xde\x9f\xb2\x19t\x16\x8b\xd7U\xfc\x97L\xe0\'\xf4\x8e\xd0\x00\x00\x00\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1739.438048][T26420] usb 6-1: USB disconnect, device number 115 15:39:32 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, "f4"}, 0x2) 15:39:32 executing program 2: unshare(0x2000400) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 15:39:32 executing program 0: socketpair$unix(0x1, 0x801, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, "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", 0x1000}, 0x1006) write$sndseq(0xffffffffffffffff, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x0, @time, {0x5, 0x7fff}, {}, @queue}], 0x30) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 15:39:32 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) write$P9_RSTATu(r3, &(0x7f0000000440)={0x87, 0x7d, 0x0, {{0x0, 0x53, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xe, 'systemvboxnet0', 0x6, 'ramfs\x00', 0x6, 'ramfs\x00', 0x6, 'ramfs\x00'}, 0x1f, '@vboxnet1keyringeth0wlan1vmnet1', 0x0, 0xee01}}, 0x87) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) fstat(r2, &(0x7f0000000300)) 15:39:32 executing program 1: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xb2, 0x4b, 0x4a, 0x10, 0x4e6, 0x5, 0x177, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x2, 0xcc, 0xb8, 0x28, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000e00)={0x1c, &(0x7f0000000d40)={0x0, 0x0, 0x2, "76f9"}, 0x0, 0x0}) 15:39:32 executing program 4: ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x802d, 0x23, 0x7}) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) 15:39:33 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, "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", 0x9e0}, 0x1200) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000140)=0x8) 15:39:33 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='\\security\x00', 0x5) read(r0, 0x0, 0x0) 15:39:33 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1c, 0xb, 0x68}}) [ 1740.202421][T14387] usb 2-1: new high-speed USB device number 118 using dummy_hcd 15:39:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) 15:39:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f13000)={0xa, 0xce22}, 0x1c) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 15:39:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) [ 1740.464566][T14387] usb 2-1: Using ep0 maxpacket: 16 [ 1740.592678][T14387] usb 2-1: config 1 has an invalid interface number: 217 but max is 0 [ 1740.601002][T14387] usb 2-1: config 1 has no interface number 0 [ 1740.607680][T14387] usb 2-1: config 1 interface 217 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1740.617699][T14387] usb 2-1: config 1 interface 217 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1740.627831][T14387] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 1740.637020][T14387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.689303][T14387] ums-sddr09 2-1:1.217: USB Mass Storage device detected [ 1741.343380][T14387] ums-sddr09: probe of 2-1:1.217 failed with error -5 [ 1741.358910][T14387] usb 2-1: USB disconnect, device number 118 [ 1742.072383][T26420] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1742.312383][T26420] usb 2-1: Using ep0 maxpacket: 16 [ 1742.432666][T26420] usb 2-1: config 1 has an invalid interface number: 217 but max is 0 [ 1742.441022][T26420] usb 2-1: config 1 has no interface number 0 [ 1742.447313][T26420] usb 2-1: config 1 interface 217 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1742.457254][T26420] usb 2-1: config 1 interface 217 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1742.467316][T26420] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 1742.476536][T26420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.524788][T26420] ums-sddr09 2-1:1.217: USB Mass Storage device detected [ 1742.834127][T26420] ums-sddr09: probe of 2-1:1.217 failed with error -5 [ 1742.844627][T26420] usb 2-1: USB disconnect, device number 119 15:39:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r0) inotify_init() r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:39:43 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 15:39:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, "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", 0x9e0}, 0x1200) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000140)=0x8) 15:39:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r0, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000700feffffff0800000000000000", 0x24) 15:39:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) 15:39:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000001d40)={0x2, 0x70e000}) 15:39:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) 15:39:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x401, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) open(0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000380)=0x1) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)) 15:39:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd137ea4ea985f7b0) 15:39:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x56}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x22) 15:39:43 executing program 0: io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x109006, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)="d10441af35"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) 15:39:43 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 15:39:43 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x29, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 15:39:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, "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", 0x9e0}, 0x1200) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000140)=0x8) 15:39:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x20000000014) rt_sigqueueinfo(r1, 0x16, &(0x7f0000000100)) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0) 15:39:44 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 15:39:44 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd8f, 0x10, &(0x7f0000000000), 0x10}, 0x22) 15:39:44 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d6f43020200e010173170000000109021b0001000000000904000001a9686225894ae210290baa64ab9aa8c4e8000905091e0000000000"], 0x0) 15:39:44 executing program 4: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 15:39:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) openat$mixer(0xffffffffffffff9c, &(0x7f0000001540)='/dev/mixer\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x32e) 15:39:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x2) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, "1ef0bcda65fd8b2974b0a7fcf28d131421cf03615568011f64dbc2942da1e4ef541ebd979c2249d8158f70c2585b1d7c171e6d69709795e958b55eebb2b189b0d1825001fc5afd800411de52c83c640b7ca0123ffa6506b9c412ffb453f735e15179f4d889c4a461b86079e8c1fd8e71277939a10305ff12de846f79d24e9f9dda5ed5dbbd5626d2667f1b1cc9a858dff47f5f9738aa10ace7a662b2f04995e2e525a71d08eb120b8000efef006a4aadd0599f7a77a46033002a6dd554ad9cf9b14a8d792958ced83e50e97604ebdaacf412ce920119486a384e2636ac91f671a15f62be1aef76018a540bc3f867ecde3a3ad7b73917388bf39d4e4fe3b7e2406962cf6a11da4e8b1e2f8b5153a6124dee5adc45bbc45aeb145e6dcfc594fc1a3c5d06e0f2cad2a8a5f8134088933b24e741eaeb5871e7a8ac7ab6bf33924385d7350731a1b62400000000000000073d7d8cd5c69d6a72cb52670fc3267ba0d80b60a5967be4470a50b0cfe7bd1384e716b614e16b609b58e8935dbb9345ba0e9693da4f215f3ce4883bfe9e20bf88aabee93cef26858f764c75e922b39bbca66a7716123c39123e83e329ee887ec4520b1311471bff755fb4efb67fde493ed7eae30069069fae34fa3a1780f67109103c91ab1886bd1d62bd1df6ecfd5c286cd10dc11f26bd7c7f8683fb3f46adace7f48da61b5ea9a9c46f003fb4c29974ed9d29463a9cbc904f61cae90b4d225c27549761aef54b3d18a212a99f7428f1fb9409019c9a4f329cd491c907c1d620572c27cb798ba8adcdd0fade375a86783efafe1810d4613c6ec008825d7e6034b81af526c40c06b4b0b480ca038b1f6a5e519f5bd828f2d274ebb642d257531c85c7607f622e170691e2653f3fa9166fa1632dd4824adbf730424148bca745f744bf67162b501eb939648c4cdcf0e9fbecb53b894e2f21eb96301087e8d60792f288bcf10aebc5fdb69f3c43a2d7497b52c3334e8a4a31b204eeafdf9c0fd21770512486036ec7aa392c69b4e9cf960fe36e126d686fad8f83e1d93ac094563b1dec31a5f9ca36696325e935ec88db90910d9cabaf0771b42ac45ff0401e0d4645463da4bedffcf09079cf9f3eb8e91b0e72e1108a06c4247b698b88ad8b4ed4e60d629b03b5e2ba6bebfac87598b748c2b68ee6e66802aa3821dbbed79f4665b279d2b651270cec300b0f57661561a19d1bea60389e5a91d3df40d21eaa9d6d58b82de5179d83dee7d258860767546e58e2ce40722c01c0ac89f6a6c7d2e53a57e24d192df33283a4b2f9007c4feacbce7ac699b7e175a9c654c01b7ab93b2678788b0226b8a1ec3dfd3fd3ae6477df9e532d536dee33cf4e666f2301b65b319208d814b9ebe5899a984b6b73e2cae1ae032c74a863abac32752b07d5a85740ceccaa0194eeff23dbf8cbfbee5c51fca6950344e132dc74ed464fd8be6a4c2e9ba51ee3c6af7dd069197bdece8a5ce4312846a66c5539a4eacb905095b0c2f9589f1dfa97482326e2996078860ab4bba5f3cf82c1c1326140eee73a0e23449f3c505daa448f12c7193861908171143302dcbf0d520db85b4efaf51aa5887188f6347c985583db7334e689df46469c990161bac97f67cf20b2789c5f48de88ab9a80ad47cc1bdacf90a6682e004d4b243556fa5eed8e2fa144ac2d567fdd83a2e6c5a08aa5be96255d461fc4a79a239a7718d4632b188a16d7f440122b0280fca7ffd38f8185f5c4b2b4a5aecc1726fc94bfdd5a5f95e315cbdce00812b9da0fa0161a57c5c61de410bfc107f8bea443f60a56f930b6d99554ec80b4d2f5ee448562860e2fa6309214298af1af08e69ef2cff3a82df76181be18f918eea1a1cc3555ae491433ff73d153807a1f2bbfa5686a0d866944d8a608bbd4210ddc45d1a8d799c84cf82b96872923d3c2e9b3d5acd8fb0db1b5433c8c7928a2ae8eb8597940807dec4ffe49d51d9934d28ea47ffad745079f1aa757dcc06f376a951b82a764fdbd7f61213b0cad4011f7ff264a62286694b0cec512f06c6540cd47b3fe9d070c4c86f97b5fad5304946be17f21bed025d929005069059d183d6f45077b52a4fdeb00aff672e9307b487baa8dd0df753f45bc8345a14ea85a6c81b1517ddfe2d90a4d922487c1c4dc5c57fc84a88967afd2393a6fe339d1db3cc133e41cbc810d7cb2d2a2179394bf2f184ad58d97b2b5f4fd62757ef9834c8ba80a3978a7cbe4ad931281fc190a846cfab98350d062c956acbfdf32e8fc5a5523766c8e72136ca1756868b49fd3b6c27d5fd9eb66ab1b7afb286d18dcd602e23d0f184f7acbbcc2bc2e86ac560758f72c0a72e981c0e6ecd325f4e815666d2ee49488fd1f18d2dd4fc2408af03d38f5411e50c17676e6be7eb1c26229f3e74e353b9f639ac0d2ab23c395de4a52fce6b1e23bb6db5d145e5a3e55c959a26da91ddd6a75553a697a5c0473844f8e7d5f840bde08dd0c6e7c53d0cfa9ea858fc326012b0a598dbd0c609652d648b6d65bbacdd587d3da40c6987d335d34ee1b5c3ada9f6a6d2af25590cf60cd2a589682d6e5cd5c3590e538943ce97a0cd3a6eb3199467c8c6a413779f22628339f3219a2ce07cde20000004376284dd8fa129725d5c82466ebb98e1ccaa4f0f1aa045314c7ba6298c80c9d574ffebca01f8789b86ca35e4eedba4a202bbb814166c8b1ea23ae0a1e6e73e9b91eb044c54f1f4698ced7a83f3009fb20d299c63b95e18d5aa43af0682c9f3b2127694945c55e46d286f0f9980f3e32b7a9474a8b4dc6aa38e9114c3c96cd846066ff215873f4ab74693bf5f65bda00ae58882be7f3d74038c15d654c9b410895045b5044bec6e8f49f8e856ddac9edde740bdb572b9787c34d4c8e33c0216dda25a84342adf6a4a26ecb738fe026c6c013dde0b03982873db9fc5d3b92031b55e039666b429605c7dd612000327be6e88bafd2ab871c206ba17225f2ccb0febbbf9375d08d0bb3caf44ce6af108f73d55cfee912b4576994aa7d518b16bdf3c98caddec2cde6c687f9e476e4a644be70fa669150604fa0d38ef93b1104e1b7ad96aab4058ef270bb239b55d5021c07fc3b1aca4e4abc1a001b1ea80a0886b6ba000481c296eb0404c633ad04d4cd14a38adb081dfb87dca5ab7257a5b389395b24c224208e2f04ba51398c17f8588ab2e7135629b06a21b6e752bcb5dc48ad26a3409d915522bbd5c0bf7c7d1e7891cbd68e4c8d7db40706456004fb5399489ea0d6354e3f7acdc362b0e74e066b44307004f3953f94a7861e24a7d0a43f800416dd36831ee2a064a72e5198a50d6020c96588f5e8a21a10a6e63e2c6eafceb7b73499573b4a422296acccb2afd810940d95dc2ba6e9c680a07b20c0efd727f109b933d82d1191443314eb7b7d6c4ec32959d737584fbcab55551906c9ded9fb59757265f74b80391a0a86a6523c5ba9d3bed55337a7943fc3f1d3dafb465f7e2488f2c461e1e1efc83f8593c497a3805ff1f62bc7e9ffccbe29cc7511712564a1477c28a5854048490ac1445ffeaa6516a5038be83f1a28685b58fa8be112a9622bd8a649f703ef8d9091ecbfd76980bf697b3273e27c6010b127a91d5a9ab9341fd411ecc3868df73ff8143a8650f2e6eb628395e9b3b6d4afed7d1c8bccab30925c678aea0810c1131a02aaa4edd88c41c42a5a5f1b61c10c7beddaaea2647b19aa47bbd096b99e2b5318f65c8d43c3938bc5efc20e906e24e08dd41cb3363d50d889224b8c344c140b00e6b6983bcee96a6c5bb54e4a4091507e7e99c22ffc90c51acd5e179a0c75564c82afc765aa2b20f98118b622ab3ffd535651f71a3d488f6b5fea72888bc5a1e4696f1cbb7d0e9aa71bcb758b6d1acb9c50b860302d3eb3c3118d70f8b1350d72bacfe21fca3398dc774558ce42851bc62616ab400fcbab927d59fb3dc4be315b1693dd4dc32c7a236264f71f0e359b9a7375926985412b121e78e64393bdb5fb7632fe24953c3cd099c86932004ee4ac9e73e175b40a0bf0b399a304ef60c7e5d5a73db3be86bb0cd2aba1f0637ec8f64b58cb90192ad3194c1635db203e8a9a656b7979f3c8a727fbc2d7dc19a327a7b23ffa2e1af862ca3fbc8670415672e7f8184d243a30e6181dc9d1aa58f3e4af3f67baae19056d894ffb19f5799229f68cdfb98b948585aebce76fbd804ba2c5fb51667e9944835b44c43a4dcf78f2ac2c66e504af19743554266b1304ab6a90bc91612575b1e6c8b8ad10a9a0599649089e7b8a8905750c13ce39c54dcb3cd75194cb3b943d998f28f77e72d9c82b6e0281c07fffed1fe2391298be2e97982ca1761202d6b6f1db044353c05f94c9603117f6f25a7c6df3fb1d44a56d6033c66d9c96a06b1165e155d911b33dc29343aa48d9f81ab896f330cdc10b5f475b52c7e850a0df972c0503d59b2e80f46b87ceb4d98bf9955c46fcc977458c48e7a7f4ff25ad98c7da93eb8250cf1b12b8622d0231e1197c7cf7b4f2725b202ed38f72c5c37db79698710326da93bd73f68f542c4047efdd2fc7e86a5ddb02f57f03a42e4335a53ecc407f53a10ee9d4639821889529122509731e5254a972af05c7c9df9d235587a39681e15bb72710ac504654cc2f0fe01e427d07f8513bf1d715e2cacd771a4f1f426b2b68453aa417bf8718f97667b5371ba7df1a2ab2d61c81bff99bfdc88e587fccac9a2367cf7c029cbe319010715e0da77acfc1da2a301918924724300e407f806c16f5db7bd2ed964fbb61d404eedc27ada753385888b95a5689e8c4c54a134c2b0b85ca91a272e6a53513cd59ba8e69fbf5aa641c8fdffd601e5ecd25a77bbee30d0b0242435edaf223baead597745c54b5511d00bf56d60f77e5eb246d2f9158f662bbe713a936af79820472a36a1da4173d11866942e81fbd5a71c2f77cde1d467e198c8fe46f1ea737fd4c66c8035630bbb2117b15d81bb6af2274f0492fa5c396ffe596fddf1704d7543ca0c160528bb4ab0bbfebb80102e5347c696d3d97fc71e465e763f49b5662fda0fddc2adae9e991dd691311ee9693bbeb117ce0e22ce9a3a58348e8a5fe4a173cc4ada538bf9fcfd2603893fde3a741f73917bab724701a706438b8931dd129a51b534dba3264c118522382628b509e6d9417d4a620801c64c78a3a1ad588d5e4a88425e5e9391d62be44e8f8a70ccabe35bfd2bcbb543e2d7cc1f6f35279da3a19a39803887a6b3509b1fa70938fcc4fb6ed4d6d08f213b043699faf07929e82189dfd536456a9173adb918650581a3078a740b8d298327c0d38f7c1abb7efce09f3465563d3c6013484e494cc40ffd8e0514b53264bce6a73a91809fdd02c9f6ca53ba200e3c4d27408c3a394bb6eecada3e83ae54827a29b1318f949f1c3644452d89b72ff6763698c9238d0fba1cae17c2fcce8d2bdf5768a9ba618a8b9c55e30ce358b9e98a86c4d2885c854d2bad2458e01f0e6af7c22a78d5f2df3875f39b71eb3095f62f2855603860b382049e7867fb5006d08d8d7da3b7bd9f205d5893cf6eed0d35738e68783d6189d162e637530c00851099a645a021a89b87d28ccdc39a27e967f6e4794533e1783871bb99a10aff964f63d239f00b6d16793ba2cdd9bf5c1414b9b6a9ec02997cc58e89565c908d92ee74c8a2180c7991db2d4bfe1a2356337b4c25b0a98152078dd9749c7d6536065150a5f0e77074fb615974c3ca600a4434b8dc149b890efe9f49acefdfd3105bccbd87caab83c00", 0x9e0}, 0x1200) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000140)=0x8) 15:39:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\xd7\xc5\xf8\x9c!\x8a\xaat\xff\a\xc2t\xbe\xc4K\xcf\xb1\xb8I\xcfzg&\xaa\xef.\xb8\xdf\xed\x9e^\x8e\xf66\t\xba\x16}\xab\x00\x00\x00\x00\x00\x00\x00\x89\xbe\xdd\xf3_\xef\x0e,\x89\x0f\xe3}\xfe\x95\x96|\x8ey\xf8\xbc\xe8n\\\xbf\x89\xe7') fchdir(r1) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x4, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 15:39:44 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x10000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read(r0, &(0x7f0000a16000)=""/71, 0x47) 15:39:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0x1}) 15:39:44 executing program 5: syz_usb_connect(0x0, 0x3a, &(0x7f0000005180)={{0x12, 0x1, 0x0, 0xef, 0x58, 0xb8, 0x40, 0x187f, 0x301, 0x4f81, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x24, 0x7, 0x2, 0x86, 0x54, 0x89, 0xf9, [], [{{0x9, 0x5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2}, @generic={0x2}]}}, {}]}}]}}]}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socket(0x0, 0x3, 0x0) [ 1751.622907][T14387] usb 1-1: new high-speed USB device number 22 using dummy_hcd 15:39:44 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0xc, 0x5, 0x11, 0x0, [{}, {}]}, @rr={0x7, 0x7, 0x4, [@dev]}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 15:39:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1ff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x97, 0x29, 0x0, [], 0x2f}]}}) 15:39:44 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0xc, 0x5, 0x11, 0x0, [{}, {}]}, @rr={0x7, 0x7, 0x4, [@dev]}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) [ 1751.892440][T14387] usb 1-1: Using ep0 maxpacket: 32 [ 1751.908669][ T8420] Disabled LAPIC found during irq injection 15:39:45 executing program 1: r0 = socket$kcm(0x10, 0x802, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c00810ee00f80ecdb4cb9f207c804a00d000000090003fb0a0002000e0ada1b40d805000600c50083b8", 0x2e}], 0x1}, 0x0) [ 1752.015762][T14387] usb 1-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1752.026623][T14387] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1752.040467][T14387] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 1752.049770][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.058806][T11839] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1752.061271][ T8483] bridge: RTM_NEWNEIGH with invalid state 0x9 [ 1752.071203][T14387] usb 1-1: config 0 descriptor?? [ 1752.362653][T14387] usb 1-1: string descriptor 0 read error: -71 [ 1752.372757][T14387] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 1752.379924][T14387] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 1752.391263][T14387] usb 1-1: USB disconnect, device number 22 [ 1752.422697][T11839] usb 6-1: config 0 has an invalid interface number: 36 but max is 0 [ 1752.430911][T11839] usb 6-1: config 0 has no interface number 0 [ 1752.437251][T11839] usb 6-1: config 0 interface 36 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 1752.448002][T11839] usb 6-1: config 0 interface 36 has no altsetting 0 [ 1752.612744][T11839] usb 6-1: New USB device found, idVendor=187f, idProduct=0301, bcdDevice=4f.81 [ 1752.622016][T11839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.630250][T11839] usb 6-1: Product: syz [ 1752.634569][T11839] usb 6-1: Manufacturer: syz [ 1752.639216][T11839] usb 6-1: SerialNumber: syz [ 1752.645587][T11839] usb 6-1: config 0 descriptor?? [ 1752.946066][T11839] smsusb:smsusb_probe: board id=12, interface number 36 [ 1752.956433][T11839] usb 6-1: USB disconnect, device number 116 [ 1753.182383][T26420] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1753.422374][T26420] usb 1-1: Using ep0 maxpacket: 32 [ 1753.542485][T26420] usb 1-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 1753.553228][T26420] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1753.566278][T26420] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=17.73 [ 1753.575469][T26420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.585328][T26420] usb 1-1: config 0 descriptor?? [ 1753.672348][T11839] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1753.862615][T26420] usb 1-1: string descriptor 0 read error: -71 [ 1753.872436][T26420] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 1753.879624][T26420] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 1753.891141][T26420] usb 1-1: USB disconnect, device number 23 [ 1754.052543][T11839] usb 6-1: config 0 has an invalid interface number: 36 but max is 0 [ 1754.060850][T11839] usb 6-1: config 0 has no interface number 0 [ 1754.067233][T11839] usb 6-1: config 0 interface 36 altsetting 7 has an invalid endpoint with address 0x0, skipping [ 1754.077849][T11839] usb 6-1: config 0 interface 36 has no altsetting 0 15:39:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xfec0ffff00000000}}, 0x20) 15:39:47 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0xc, 0x5, 0x11, 0x0, [{}, {}]}, @rr={0x7, 0x7, 0x4, [@dev]}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 15:39:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x14a) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 15:39:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7b, 0x5, [0x40000071, 0xff00000000008505], [0xc1]}) 15:39:47 executing program 1: r0 = socket$kcm(0x10, 0x802, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c00810ee00f80ecdb4cb9f207c804a00d000000090003fb0a0002000e0ada1b40d805000600c50083b8", 0x2e}], 0x1}, 0x0) [ 1754.242555][T11839] usb 6-1: New USB device found, idVendor=187f, idProduct=0301, bcdDevice=4f.81 [ 1754.251815][T11839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.260110][T11839] usb 6-1: Product: syz [ 1754.264529][T11839] usb 6-1: Manufacturer: syz [ 1754.269218][T11839] usb 6-1: SerialNumber: syz [ 1754.297080][ T8640] bridge: RTM_NEWNEIGH with invalid state 0x9 [ 1754.326528][ T8642] input: syz1 as /devices/virtual/input/input255 15:39:47 executing program 3: syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev, {[@timestamp={0x44, 0xc, 0x5, 0x11, 0x0, [{}, {}]}, @rr={0x7, 0x7, 0x4, [@dev]}]}}, @tipc=@payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) [ 1754.364255][T11839] usb 6-1: config 0 descriptor?? 15:39:47 executing program 1: r0 = socket$kcm(0x10, 0x802, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c00810ee00f80ecdb4cb9f207c804a00d000000090003fb0a0002000e0ada1b40d805000600c50083b8", 0x2e}], 0x1}, 0x0) [ 1754.671216][ T8789] bridge: RTM_NEWNEIGH with invalid state 0x9 15:39:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="f3410fc7b18df6000048b800000080000000000f23d00f21f835100000090f23f83e36f3416f35100000000f22e0c4e1d1f93766b8cb008ee8c4a18dc27874593ef30f0966ba410066ed48b800000000000000000f23c80f21f8350c0020000f23f8c744240000500000c7442402a8d70000c7442406000000000f011424", 0xffffffffffffffbf}], 0x192, 0x0, 0x0, 0xfffffffffffffe11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:39:47 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x171, 0x11, 0x6f}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 15:39:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x40000092}]}) 15:39:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xfec0ffff00000000}}, 0x20) 15:39:47 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc008}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @sliced}}) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @sliced}}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000200)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000003c0)={0x0, 0x1, [0x6, 0xe94, 0x1f, 0x3ff, 0x5, 0x5, 0x888d]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x2000, 0x0) r5 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000380)) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000500)={0xfd, 0x2, 0x1a0}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fefdf715ea0d886cba48a1fdb6c664486cbdcad3d711c368d7443dbf3b27927e298009b2467799e1488a495d956fb2ccf08f765ab78b6f91af5952b6f2afe6d3192981e7b6834452861b6e91593323164c", 0x2ca}], 0x1}, 0x0) sendto$inet(r4, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 15:39:47 executing program 1: r0 = socket$kcm(0x10, 0x802, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c00810ee00f80ecdb4cb9f207c804a00d000000090003fb0a0002000e0ada1b40d805000600c50083b8", 0x2e}], 0x1}, 0x0) [ 1754.836851][T11839] smsusb:smsusb_probe: board id=12, interface number 36 [ 1754.865170][ T8838] bridge: RTM_NEWNEIGH with invalid state 0x9 [ 1754.906008][T11839] usb 6-1: USB disconnect, device number 117 15:39:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x3, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}}}, 0x48) 15:39:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xfec0ffff00000000}}, 0x20) 15:39:48 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x10000e0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x2000000000000000}, 0x0) 15:39:48 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc008}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @sliced}}) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @sliced}}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000200)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000003c0)={0x0, 0x1, [0x6, 0xe94, 0x1f, 0x3ff, 0x5, 0x5, 0x888d]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x2000, 0x0) r5 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000380)) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000500)={0xfd, 0x2, 0x1a0}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fefdf715ea0d886cba48a1fdb6c664486cbdcad3d711c368d7443dbf3b27927e298009b2467799e1488a495d956fb2ccf08f765ab78b6f91af5952b6f2afe6d3192981e7b6834452861b6e91593323164c", 0x2ca}], 0x1}, 0x0) sendto$inet(r4, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 15:39:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x40000092}]}) 15:39:48 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000e000b40b9066140a36b008000010902120001000000000904d4426b00c3646a7323b4040000007a00"], 0x0) 15:39:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@local, @in=@remote}, {{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0x32}, 0x0, @in6}]}, @mark={0xc, 0x15, {0x0, 0xfffffffffffffffe}}]}, 0x178}}, 0x0) 15:39:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xa) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xfec0ffff00000000}}, 0x20) 15:39:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x40000092}]}) 15:39:48 executing program 0: unshare(0x400) r0 = eventfd(0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) 15:39:48 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) [ 1755.733447][T11839] usb 2-1: new high-speed USB device number 120 using dummy_hcd 15:39:48 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc008}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @sliced}}) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @sliced}}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000200)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000003c0)={0x0, 0x1, [0x6, 0xe94, 0x1f, 0x3ff, 0x5, 0x5, 0x888d]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x2000, 0x0) r5 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000380)) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000500)={0xfd, 0x2, 0x1a0}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fefdf715ea0d886cba48a1fdb6c664486cbdcad3d711c368d7443dbf3b27927e298009b2467799e1488a495d956fb2ccf08f765ab78b6f91af5952b6f2afe6d3192981e7b6834452861b6e91593323164c", 0x2ca}], 0x1}, 0x0) sendto$inet(r4, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 15:39:48 executing program 5: r0 = socket(0x100000400000010, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000280)="240000004e001f0014f9f4070109040002600710080001000100000008009437c56e0000", 0x307) 15:39:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000a80)={0x1, 0x0, [{0x40000092}]}) 15:39:49 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, r4, {0xfff2}}}, 0x24}}, 0x0) 15:39:49 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x0, &(0x7f00000001c0), 0xfffffc9a) [ 1756.183200][T11839] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 1756.191506][T11839] usb 2-1: config 0 has no interface number 0 [ 1756.197837][T11839] usb 2-1: too many endpoints for config 0 interface 212 altsetting 66: 107, using maximum allowed: 30 [ 1756.209182][T11839] usb 2-1: config 0 interface 212 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 1756.222664][T11839] usb 2-1: config 0 interface 212 has no altsetting 0 15:39:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 1756.314458][T11839] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=6b.a3 [ 1756.323710][T11839] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 1756.331960][T11839] usb 2-1: Product: syz [ 1756.393853][T11839] usb 2-1: config 0 descriptor?? [ 1756.712581][T11839] speedtch 2-1:0.212: speedtch_bind: wrong device class 14 [ 1756.720003][T11839] speedtch 2-1:0.212: usbatm_usb_probe: bind failed: -19! [ 1756.730271][T11839] usb 2-1: USB disconnect, device number 120 [ 1757.402369][T26420] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1757.762558][T26420] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 1757.770877][T26420] usb 2-1: config 0 has no interface number 0 [ 1757.777187][T26420] usb 2-1: too many endpoints for config 0 interface 212 altsetting 66: 107, using maximum allowed: 30 [ 1757.788417][T26420] usb 2-1: config 0 interface 212 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 1757.801912][T26420] usb 2-1: config 0 interface 212 has no altsetting 0 [ 1757.882706][T26420] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=6b.a3 [ 1757.891989][T26420] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 1757.900399][T26420] usb 2-1: Product: syz [ 1757.905841][T26420] usb 2-1: config 0 descriptor?? [ 1758.222494][T26420] speedtch 2-1:0.212: speedtch_bind: wrong device class 14 [ 1758.229764][T26420] speedtch 2-1:0.212: usbatm_usb_probe: bind failed: -19! [ 1758.241586][T26420] usb 2-1: USB disconnect, device number 121 15:39:51 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'ip_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCDFWD(r0, 0x40047452, 0x0) 15:39:51 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc008}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @sliced}}) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0xfffffffffffffff9, 0x2, {0x9, @sliced}}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000200)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000003c0)={0x0, 0x1, [0x6, 0xe94, 0x1f, 0x3ff, 0x5, 0x5, 0x888d]}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x2000, 0x0) r5 = open(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000380)) ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000500)={0xfd, 0x2, 0x1a0}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfffffffffffeffff}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="fefdf715ea0d886cba48a1fdb6c664486cbdcad3d711c368d7443dbf3b27927e298009b2467799e1488a495d956fb2ccf08f765ab78b6f91af5952b6f2afe6d3192981e7b6834452861b6e91593323164c", 0x2ca}], 0x1}, 0x0) sendto$inet(r4, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 15:39:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @multicast1, 0x0, 0x0, 'wrr\x00', 0x2f, 0x1906, 0x1b}, 0x2c) 15:39:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x114, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf4, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0xe0, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x3}, @IFLA_GRE_IFLAGS={0x8, 0x2, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}], @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x8, 0x10, 0x4e24}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x7f}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_DIR={0xfffffffffffffd15}], @gre_common_policy=[@IFLA_GRE_IFLAGS={0x8, 0x2, 0x7}, @IFLA_GRE_IFLAGS={0x8, 0x2, 0x8001}, @IFLA_GRE_TTL={0x8, 0x8, 0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x1ff}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x75493}, @IFLA_GRE_ERSPAN_HWID={0x8, 0x18, 0x201}, @IFLA_GRE_TOS={0x8, 0x9, 0xffffffffffffffff}, @IFLA_GRE_ERSPAN_DIR={0x8, 0x17, 0x1}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_FLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8, 0xe, 0x2}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x8, 0x16, 0x1}], @gre_common_policy=[@IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_TTL={0x8, 0x8, 0x1ff}, @IFLA_GRE_IGNORE_DF={0x8, 0x13, 0x1}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_PMTUDISC={0x8}]]}}}]}, 0x114}}, 0x4000000) 15:39:51 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, r4, {0xfff2}}}, 0x24}}, 0x0) 15:39:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 1758.508623][ T9219] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 1758.517023][ T9219] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1758.525277][ T9219] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 1758.533566][ T9219] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 1758.541766][ T9219] netlink: 'syz-executor.4': attribute type 24 has an invalid length. [ 1758.550085][ T9219] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1758.561663][ T9223] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x26ed/0x2cb0 15:39:51 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, r4, {0xfff2}}}, 0x24}}, 0x0) 15:39:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:39:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 15:39:52 executing program 5: fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x109000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:39:52 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, r4, {0xfff2}}}, 0x24}}, 0x0) 15:39:52 executing program 1: clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = gettid() tkill(r1, 0x14) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x4206, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000040)={0x0, 0x6b00}) 15:39:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@flushsa={0x14, 0x1c, 0x507, 0x0, 0x0, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15:39:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:39:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@flushsa={0x14, 0x1c, 0x507, 0x0, 0x0, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15:39:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x26f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x925, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x46, {0x46, 0x0, "a9bb1c505c52e7294e3951b67f16f0cf682cf64db21f05de030ab2cfb7da7eab9c78fc085fea35740f865785e6620f478cfe47809f8ae8c7e5b623089a72f6b4468c5c2d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:39:52 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x14371bfa, 0x4, {0x1, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_TRY_FMT(r0, 0x40045612, &(0x7f0000000000)={0x1, @pix_mp}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000100)={0x0, 0x0, @start}) 15:39:52 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 15:39:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) unshare(0x600) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x70e000) 15:39:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@flushsa={0x14, 0x1c, 0x507, 0x0, 0x0, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15:39:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x12d, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x541d, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r4, 0xae9a) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:39:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@flushsa={0x14, 0x1c, 0x507, 0x0, 0x0, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 1759.682374][T26420] usb 3-1: new high-speed USB device number 34 using dummy_hcd 15:39:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) [ 1759.922387][T26420] usb 3-1: Using ep0 maxpacket: 8 [ 1760.042879][T26420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.053962][T26420] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1760.066963][T26420] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 [ 1760.076203][T26420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.101758][T26420] usb 3-1: config 0 descriptor?? [ 1760.588160][T26420] smartjoyplus 0003:0925:0005.006B: hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.2-1/input0 [ 1760.600283][T26420] smartjoyplus 0003:0925:0005.006B: no output reports found [ 1760.789332][T11839] usb 3-1: USB disconnect, device number 34 [ 1761.552293][T26420] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1761.812559][T26420] usb 3-1: Using ep0 maxpacket: 8 [ 1761.932454][T26420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.943666][T26420] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1761.956669][T26420] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 [ 1761.965926][T26420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.975512][T26420] usb 3-1: config 0 descriptor?? 15:39:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086d0490c0400000000001090224000100000000090400000903010000092100000001220600090581030000000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local, @main=@item_012={0x2, 0x0, 0x0, "dc79"}, @local=@item_012={0x1, 0x2, 0x0, '\x00'}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:39:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="136458cfebde", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev}, "23678d6e112afd00"}}}}}, 0x0) 15:39:55 executing program 3: sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') 15:39:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) [ 1762.293432][T26420] smartjoyplus 0003:0925:0005.006C: hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.2-1/input0 [ 1762.305341][T26420] smartjoyplus 0003:0925:0005.006C: no output reports found 15:39:55 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, 0x0) 15:39:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:39:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 15:39:55 executing program 3: sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') 15:39:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) [ 1762.423144][T11839] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1762.433105][T26420] usb 3-1: USB disconnect, device number 35 15:39:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x80000001) 15:39:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:39:55 executing program 3: sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') [ 1762.662482][T11839] usb 6-1: Using ep0 maxpacket: 8 [ 1762.803057][T11839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1762.814175][T11839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1762.827511][T11839] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 1762.836709][T11839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.891573][T11839] usb 6-1: config 0 descriptor?? [ 1763.396128][T11839] logitech-hidpp-device 0003:046D:C090.006D: unknown main item tag 0x0 [ 1763.408616][T11839] logitech-hidpp-device 0003:046D:C090.006D: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.5-1/input0 [ 1763.596528][T11839] usb 6-1: USB disconnect, device number 118 [ 1764.362709][T26420] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1764.602469][T26420] usb 6-1: Using ep0 maxpacket: 8 [ 1764.722604][T26420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.733920][T26420] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1764.746897][T26420] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 1764.756113][T26420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.765818][T26420] usb 6-1: config 0 descriptor?? 15:39:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x29, 0x11d, 0x0, 0x0, {0x1803}}, 0x14}}, 0x0) 15:39:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket(0x10, 0x800000000000003, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\x06', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 15:39:58 executing program 3: sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') 15:39:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:39:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 15:39:58 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000bc70000000000000950000000000000099e941a413f864c78b07d9ffaefc3cbf11bc9031ba7a0af86bf4aa35339f6b382c4caf9db6fa7a9b85"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 1765.122651][T26420] usbhid 6-1:0.0: can't add hid device: -71 [ 1765.128951][T26420] usbhid: probe of 6-1:0.0 failed with error -71 [ 1765.168959][T26420] usb 6-1: USB disconnect, device number 119 15:39:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:39:58 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 1765.232871][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1765.239099][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:39:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x2b, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000780], 0x0, 0x0, 0x0}, 0x108) 15:39:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0x234, 0x0, r0, 0x0, [0x302e, 0x5f, 0x2, 0x1800, 0x6000000]}, 0x3c) 15:39:58 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0xffffdd86}}}}}}}, 0x0) 15:39:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800000a9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r1, &(0x7f0000000100), 0x1ede5) accept(r0, 0x0, 0x0) 15:39:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000440)={r1}, &(0x7f0000000480)=0x14) 15:39:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x7f) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0xfffffffffffffffe}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)) 15:39:58 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0xffffdd86}}}}}}}, 0x0) 15:39:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001100090468fe585de9e600000700ff3f03000000450001070000001419001a0004001210070000f48aa159ab09000000ae", 0x4e}], 0x1) r2 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:39:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 15:39:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000100)={0x7c, 0x0, [0x0, 0x0, 0x4b564d04]}) 15:39:59 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0xffffdd86}}}}}}}, 0x0) 15:39:59 executing program 2: mmap(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0xe6c}, {&(0x7f0000000240)=""/147, 0x71f}], 0x2, &(0x7f0000002740)=""/218, 0x52}}], 0x400008c, 0x2, &(0x7f0000002e40)={0x77359400}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff0e, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/585], 0x14}}, 0x0) 15:39:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 15:39:59 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3080", 0x2, r0) 15:39:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8) 15:39:59 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x2f, 0x0, @local, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0xffffdd86}}}}}}}, 0x0) 15:39:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r1, 0x100000114, 0x3f, &(0x7f0000c63ffc)="66014ebe", 0x4) 15:39:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 15:39:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r2, &(0x7f0000003040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) connect$l2tp(r3, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendto$inet6(r2, 0x0, 0xfffffffffffffdd3, 0x8000, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c) sendmmsg(r3, &(0x7f0000005fc0), 0x400000000000044, 0x0) 15:39:59 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004a80)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003e80)=':', 0x1}, {&(0x7f0000003ec0)}], 0x2, &(0x7f0000000040), 0x35f}}], 0x2, 0x0) 15:39:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_getlink={0x20, 0x12, 0x221, 0x0, 0x0, {0x2, 0x0, 0x9effffff}}, 0x20}}, 0x0) 15:39:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r1, 0x100000114, 0x3f, &(0x7f0000c63ffc)="66014ebe", 0x4) 15:39:59 executing program 4: capget(&(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) capget(&(0x7f0000000000), &(0x7f0000000040)) 15:39:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000272000)) 15:40:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r1, 0x100000114, 0x3f, &(0x7f0000c63ffc)="66014ebe", 0x4) 15:40:00 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001bc0)={'hsr0\x00'}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3400) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgsnd(0x0, &(0x7f00000004c0)={0x3}, 0x8, 0x0) 15:40:00 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x310) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) 15:40:00 executing program 5: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00004b3000/0x1000)=nil, 0x1000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 15:40:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000001c0)='attr/exec\x11') 15:40:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x40000000000005, 0x0) setsockopt(r1, 0x100000114, 0x3f, &(0x7f0000c63ffc)="66014ebe", 0x4) 15:40:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x59565955}}) 15:40:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="b9a3090000b85ea10000ba000000000f30f4b9800000c00f3235000100000f3066ba2000ec66bad00466ed440f20c03508000000440f22c0c4227d1ab31d3ed4df1c8a66b896008ed0450f2185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0x8f0843ea) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x446, 0x0, 0x0, 0xfd9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000f0000000000", 0x24) 15:40:00 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}}) 15:40:00 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x2, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2000, &(0x7f0000000000)={0x2, 0x0, @local}, 0x710000) 15:40:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x59565955}}) 15:40:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 15:40:00 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}}) 15:40:01 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0x401) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, 0x0, 0x0, 0x0) 15:40:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r2, &(0x7f0000007080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@multicast1]}, 0x14) 15:40:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x2, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2000, &(0x7f0000000000)={0x2, 0x0, @local}, 0x710000) 15:40:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x59565955}}) 15:40:01 executing program 0: io_setup(0x7, &(0x7f0000000100)=0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r1, 0x0}]) 15:40:01 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}}) 15:40:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x59565955}}) 15:40:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x2, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2000, &(0x7f0000000000)={0x2, 0x0, @local}, 0x710000) 15:40:01 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}}) 15:40:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x4, {{0x2, 0x0, @multicast1}}}, 0x88) mprotect(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000080)=0x2e5) 15:40:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x1, 0x2, [@loopback, @loopback]}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x1, [@loopback]}, 0x14) 15:40:01 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba00009b80068848", 0xe}], 0x1}, 0x0) 15:40:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x2, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@dev]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2000, &(0x7f0000000000)={0x2, 0x0, @local}, 0x710000) 15:40:01 executing program 5: r0 = epoll_create1(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f8eff3)='/dev/snd/seq\x00', 0x0, 0x20401) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000380)={0x40000004}) write$sndseq(r1, &(0x7f0000000200), 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8) 15:40:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="baa00066ed6566660f3815550d66b9710500000f320f090f788d07000f303efae0000fc77d54640f01980300", 0x2c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:02 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000200)="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", 0xfc) 15:40:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x4, {{0x2, 0x0, @multicast1}}}, 0x88) mprotect(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000080)=0x2e5) [ 1769.064422][T12511] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. 15:40:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf32, 0x0, 0x0, 0x0, 0x0, 0x3ffffffc}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000140), 0x0, 0x0) 15:40:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@getae={0x4c, 0x1f, 0x1, 0x0, 0x0, {{@in6=@loopback}, @in=@empty}, [@mark={0xc}]}, 0x4c}, 0x8}, 0x0) 15:40:02 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r1}, {0x0, 0x2710}}) getdents64(r0, &(0x7f0000000140)=""/72, 0x48) 15:40:02 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9e, 0x3a, 0xf6, 0x40, 0x2001, 0x3308, 0xbb19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "44d5ae"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4, '\x00\x00\x00I'}, 0x0, 0x0, 0x0, 0x0}) 15:40:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x4, {{0x2, 0x0, @multicast1}}}, 0x88) mprotect(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000080)=0x2e5) 15:40:02 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0xfc}, 0x80, 0x0}, 0x0) 15:40:02 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff8000/0x2000)=nil, 0x2000}, 0x1}) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) 15:40:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x4, {{0x2, 0x0, @multicast1}}}, 0x88) mprotect(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000080)=0x2e5) 15:40:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) 15:40:02 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x3f, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) 15:40:02 executing program 4: r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f0000000000)=""/43, 0x2b}}, {{0x0, 0x1de, &(0x7f00000037c0)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x11b, 0x0, 0xd6}}], 0x2, 0x3, 0x0) [ 1769.804769][T26420] usb 3-1: new high-speed USB device number 36 using dummy_hcd 15:40:02 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0xfc}, 0x80, 0x0}, 0x0) 15:40:02 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x65, 0x80, 0x29, 0x40, 0x123, 0x1, 0xabfb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x1, 0xeb, 0x4d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) 15:40:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @initdev, {[@timestamp={0x44, 0x4}]}}, @icmp=@timestamp}}}}, 0x0) 15:40:03 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0xfc}, 0x80, 0x0}, 0x0) [ 1770.191184][T26420] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1770.199502][T26420] usb 3-1: config 0 has no interface number 0 [ 1770.205962][T26420] usb 3-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=bb.19 [ 1770.215204][T26420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.266503][T26420] usb 3-1: config 0 descriptor?? [ 1770.372634][T12155] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1770.512556][T26420] rtl8192cu: Chip version 0x0 [ 1770.517326][T26420] rtl_usb: Too few input end points found [ 1770.732704][T12155] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 1770.741095][T12155] usb 1-1: config 0 has no interface number 0 [ 1770.748435][T12155] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=ab.fb [ 1770.757693][T12155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.766985][T12155] usb 1-1: config 0 descriptor?? [ 1770.816955][T12155] usbtouchscreen: probe of 1-1:0.16 failed with error -12 [ 1770.982522][T26420] usb 3-1: Unsupported USB TX end-points [ 1770.988470][T26420] usb 3-1: Fatal - failed to identify chip [ 1770.994853][T26420] rtl8xxxu: probe of 3-1:0.29 failed with error -524 [ 1771.011090][T26420] usb 3-1: USB disconnect, device number 36 [ 1771.019520][T11839] usb 1-1: USB disconnect, device number 24 [ 1771.702392][T11839] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1771.872379][T26420] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1772.112548][T11839] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1772.121380][T11839] usb 3-1: config 0 has no interface number 0 [ 1772.127891][T11839] usb 3-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=bb.19 [ 1772.137353][T11839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.146955][T11839] usb 3-1: config 0 descriptor?? [ 1772.232689][T26420] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 1772.241121][T26420] usb 1-1: config 0 has no interface number 0 [ 1772.247976][T26420] usb 1-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=ab.fb [ 1772.257197][T26420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.267127][T26420] usb 1-1: config 0 descriptor?? [ 1772.316831][T26420] usbtouchscreen: probe of 1-1:0.16 failed with error -12 15:40:05 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x8aa01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX, @ANYBLOB="184245b4f5c0d4c7354b49a0b0179e50c9d6837ba5692f8a710daec742635511bb93b7b9c269ee55abc600e053339c8968dfefa57f485801e6bfd523", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES32, @ANYRES64=r4], @ANYRES32=r2], @ANYPTR, @ANYRESOCT], @ANYRESHEX=r2], &(0x7f0000000a80)=""/238, 0x74, 0xee, 0x5}, 0x20) r5 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000880)=ANY=[@ANYBLOB="440601080000000000000000000000000000ffffffff0001ea51f1136136bb458ffe4c3fead3e44800000000020000000000000000000001"], 0x38) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='trusted.overlay.nlink\x00', &(0x7f0000000740)={'U+', 0x732c}, 0x28, 0x2) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x9, r6, r7, r8, r9, 0xa0, 0x3fb782d6}, 0x4, 0x400, 0x1, 0x80000002, r10, r11, 0x4}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000840)=0x6) r12 = getpid() r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x440500, 0x0) ioctl$PPPIOCSFLAGS1(r13, 0x40047459, &(0x7f0000000580)=0x1000000) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000000600)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x4a, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'caif0\x00'}) sched_getaffinity(r12, 0x8, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 15:40:05 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010000, 0x0) 15:40:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x3f, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) 15:40:05 executing program 3: r0 = socket$kcm(0xa, 0x3, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8916, &(0x7f0000000000)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfa\x02\x00UM\xbf\xef\xa9\xac\x03x\xf4D3A}?\x00\x8b\x9c[\xdd\x14\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&') sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0x0, 0xfc}, 0x80, 0x0}, 0x0) 15:40:05 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "11"}, 0x119) [ 1772.412541][T11839] rtl8192cu: Chip version 0x0 [ 1772.417311][T11839] rtl_usb: Too few input end points found [ 1772.513375][T11839] usb 3-1: Unsupported USB TX end-points [ 1772.519388][T11839] usb 3-1: Fatal - failed to identify chip [ 1772.525894][T11839] rtl8xxxu: probe of 3-1:0.29 failed with error -524 [ 1772.532816][T26420] hid-generic 0000:0000:0000.006E: item fetching failed at offset -1234863583 [ 1772.533187][T26420] hid-generic: probe of 0000:0000:0000.006E failed with error -22 15:40:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_NF_CALL_IP6TABLES={0x8, 0x2d}]}}}]}, 0x3c}}, 0x0) [ 1772.644776][T14387] usb 1-1: USB disconnect, device number 25 [ 1772.659588][T11839] usb 3-1: USB disconnect, device number 37 15:40:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x3f, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) 15:40:05 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x20, 0x0) [ 1772.769387][T13417] netlink: 'syz-executor.1': attribute type 45 has an invalid length. 15:40:05 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x8aa01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX, @ANYBLOB="184245b4f5c0d4c7354b49a0b0179e50c9d6837ba5692f8a710daec742635511bb93b7b9c269ee55abc600e053339c8968dfefa57f485801e6bfd523", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES32, @ANYRES64=r4], @ANYRES32=r2], @ANYPTR, @ANYRESOCT], @ANYRESHEX=r2], &(0x7f0000000a80)=""/238, 0x74, 0xee, 0x5}, 0x20) r5 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000880)=ANY=[@ANYBLOB="440601080000000000000000000000000000ffffffff0001ea51f1136136bb458ffe4c3fead3e44800000000020000000000000000000001"], 0x38) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='trusted.overlay.nlink\x00', &(0x7f0000000740)={'U+', 0x732c}, 0x28, 0x2) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x9, r6, r7, r8, r9, 0xa0, 0x3fb782d6}, 0x4, 0x400, 0x1, 0x80000002, r10, r11, 0x4}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000840)=0x6) r12 = getpid() r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x440500, 0x0) ioctl$PPPIOCSFLAGS1(r13, 0x40047459, &(0x7f0000000580)=0x1000000) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000000600)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x4a, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'caif0\x00'}) sched_getaffinity(r12, 0x8, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 15:40:06 executing program 0: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0), 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 15:40:06 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x8aa01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX, @ANYBLOB="184245b4f5c0d4c7354b49a0b0179e50c9d6837ba5692f8a710daec742635511bb93b7b9c269ee55abc600e053339c8968dfefa57f485801e6bfd523", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES32, @ANYRES64=r4], @ANYRES32=r2], @ANYPTR, @ANYRESOCT], @ANYRESHEX=r2], &(0x7f0000000a80)=""/238, 0x74, 0xee, 0x5}, 0x20) r5 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000880)=ANY=[@ANYBLOB="440601080000000000000000000000000000ffffffff0001ea51f1136136bb458ffe4c3fead3e44800000000020000000000000000000001"], 0x38) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='trusted.overlay.nlink\x00', &(0x7f0000000740)={'U+', 0x732c}, 0x28, 0x2) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x9, r6, r7, r8, r9, 0xa0, 0x3fb782d6}, 0x4, 0x400, 0x1, 0x80000002, r10, r11, 0x4}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000840)=0x6) r12 = getpid() r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x440500, 0x0) ioctl$PPPIOCSFLAGS1(r13, 0x40047459, &(0x7f0000000580)=0x1000000) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000000600)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x4a, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'caif0\x00'}) sched_getaffinity(r12, 0x8, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 15:40:06 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 15:40:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x3f, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xffffffffffffffff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r1}}, 0x48) 15:40:06 executing program 3: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)='F', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, r0) 15:40:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x8aa01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX, @ANYBLOB="184245b4f5c0d4c7354b49a0b0179e50c9d6837ba5692f8a710daec742635511bb93b7b9c269ee55abc600e053339c8968dfefa57f485801e6bfd523", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES32, @ANYRES64=r4], @ANYRES32=r2], @ANYPTR, @ANYRESOCT], @ANYRESHEX=r2], &(0x7f0000000a80)=""/238, 0x74, 0xee, 0x5}, 0x20) r5 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000880)=ANY=[@ANYBLOB="440601080000000000000000000000000000ffffffff0001ea51f1136136bb458ffe4c3fead3e44800000000020000000000000000000001"], 0x38) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='trusted.overlay.nlink\x00', &(0x7f0000000740)={'U+', 0x732c}, 0x28, 0x2) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x9, r6, r7, r8, r9, 0xa0, 0x3fb782d6}, 0x4, 0x400, 0x1, 0x80000002, r10, r11, 0x4}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000840)=0x6) r12 = getpid() r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x440500, 0x0) ioctl$PPPIOCSFLAGS1(r13, 0x40047459, &(0x7f0000000580)=0x1000000) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000000600)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x4a, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'caif0\x00'}) sched_getaffinity(r12, 0x8, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 15:40:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000400)={0xfffffffffffff0d3}) 15:40:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x8aa01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX, @ANYBLOB="184245b4f5c0d4c7354b49a0b0179e50c9d6837ba5692f8a710daec742635511bb93b7b9c269ee55abc600e053339c8968dfefa57f485801e6bfd523", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES32, @ANYRES64=r4], @ANYRES32=r2], @ANYPTR, @ANYRESOCT], @ANYRESHEX=r2], &(0x7f0000000a80)=""/238, 0x74, 0xee, 0x5}, 0x20) r5 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000880)=ANY=[@ANYBLOB="440601080000000000000000000000000000ffffffff0001ea51f1136136bb458ffe4c3fead3e44800000000020000000000000000000001"], 0x38) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='trusted.overlay.nlink\x00', &(0x7f0000000740)={'U+', 0x732c}, 0x28, 0x2) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x9, r6, r7, r8, r9, 0xa0, 0x3fb782d6}, 0x4, 0x400, 0x1, 0x80000002, r10, r11, 0x4}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000840)=0x6) r12 = getpid() r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x440500, 0x0) ioctl$PPPIOCSFLAGS1(r13, 0x40047459, &(0x7f0000000580)=0x1000000) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000000600)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x4a, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'caif0\x00'}) sched_getaffinity(r12, 0x8, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 15:40:06 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x7ff, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f0000000000)=0x51d) 15:40:06 executing program 0: io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="9954a818049dccc80ab23a453a4a0c54bf6570df0f219a0e45b9c4a311ddd8d18cb56919cd1f150ee834516ce925b4e183e67f7d96058df66331e4c3464a8ca37498d6b41cb4908bbdaff82402d933f9209b47b10b971f1cd2eef33242d919368104066ac24950404104d56f84", 0x6d}]) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210003000000810009050a00000000000003f0afdc0a5c1aa7f091e22771a776868238520ff38068566d29acd233134c457404ff87ee1d268946bd4d3812510e552cd7281c524591cf13749cef7a636fe8333aa3375bf73d4ee75a0b57df80d54a41c91aac5b35faeac55c28029add48809faaf8606f4036a77ed0dd9c176a4385f895830e01b7a7f7c646eb507fbef7047e1d3fc6fe92a51a2fb09f6643068290ca5131379791bdf1b6a88eb1c88b0d368bf8507d4e384a38d7f16eae524a39603d84608258e1f5132f1b2c62626161e749a2dacc4a070000001d671b58fee0224776b16f00"/282], 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x81}, 0x0}, &(0x7f0000000f00)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:40:06 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x8aa01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX, @ANYBLOB="184245b4f5c0d4c7354b49a0b0179e50c9d6837ba5692f8a710daec742635511bb93b7b9c269ee55abc600e053339c8968dfefa57f485801e6bfd523", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES32, @ANYRES64=r4], @ANYRES32=r2], @ANYPTR, @ANYRESOCT], @ANYRESHEX=r2], &(0x7f0000000a80)=""/238, 0x74, 0xee, 0x5}, 0x20) r5 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000880)=ANY=[@ANYBLOB="440601080000000000000000000000000000ffffffff0001ea51f1136136bb458ffe4c3fead3e44800000000020000000000000000000001"], 0x38) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='trusted.overlay.nlink\x00', &(0x7f0000000740)={'U+', 0x732c}, 0x28, 0x2) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x9, r6, r7, r8, r9, 0xa0, 0x3fb782d6}, 0x4, 0x400, 0x1, 0x80000002, r10, r11, 0x4}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000840)=0x6) r12 = getpid() r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x440500, 0x0) ioctl$PPPIOCSFLAGS1(r13, 0x40047459, &(0x7f0000000580)=0x1000000) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000000600)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x4a, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'caif0\x00'}) sched_getaffinity(r12, 0x8, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 15:40:06 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x20, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9274}]}}}}}}}}, 0x0) 15:40:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000000100"/36, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000800010071667100480002000000000000000000000000000000000085b3a708881fa000"/81], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffffac, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0x701, 0x0, 0x0, {0x0, r4, {0xfff3}}}, 0x24}}, 0x0) 15:40:06 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7f, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)}}) 15:40:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) [ 1773.773468][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1773.838542][T13828] qfq: no options 15:40:06 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x8aa01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a290930206040000000001020009003900090035000c03010000001900054023dc0b00000022dc1338d54404009b84136ef75afb83de4411000500c43ab8220000060ced4f7826de", 0x55}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000cc0)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX, @ANYBLOB="184245b4f5c0d4c7354b49a0b0179e50c9d6837ba5692f8a710daec742635511bb93b7b9c269ee55abc600e053339c8968dfefa57f485801e6bfd523", @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYPTR, @ANYRESHEX, @ANYRES32, @ANYRES64=r4], @ANYRES32=r2], @ANYPTR, @ANYRESOCT], @ANYRESHEX=r2], &(0x7f0000000a80)=""/238, 0x74, 0xee, 0x5}, 0x20) r5 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000880)=ANY=[@ANYBLOB="440601080000000000000000000000000000ffffffff0001ea51f1136136bb458ffe4c3fead3e44800000000020000000000000000000001"], 0x38) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgrp(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) lsetxattr$trusted_overlay_nlink(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='trusted.overlay.nlink\x00', &(0x7f0000000740)={'U+', 0x732c}, 0x28, 0x2) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x9, r6, r7, r8, r9, 0xa0, 0x3fb782d6}, 0x4, 0x400, 0x1, 0x80000002, r10, r11, 0x4}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000840)=0x6) r12 = getpid() r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x440500, 0x0) ioctl$PPPIOCSFLAGS1(r13, 0x40047459, &(0x7f0000000580)=0x1000000) ioctl$sock_inet_SIOCGARP(r13, 0x8954, &(0x7f0000000600)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x4a, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'caif0\x00'}) sched_getaffinity(r12, 0x8, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) [ 1773.873030][T14387] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1773.886227][T13893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1773.896899][T13894] qfq: no options 15:40:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 15:40:07 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[{0x10}, {0x18, 0x110, 0x1, 'T'}], 0x28}}], 0x1, 0x0) 15:40:07 executing program 4: socketpair$unix(0x2c, 0x3, 0x0, &(0x7f0000000100)) 15:40:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x0, 0x101, 0x10001ff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1774.125588][T14387] usb 1-1: Using ep0 maxpacket: 16 15:40:07 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) [ 1774.245555][T14387] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 1774.254175][T14387] usb 1-1: config 0 has no interface number 0 [ 1774.260417][T14387] usb 1-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1774.269593][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.402146][T14387] usb 1-1: config 0 descriptor?? [ 1774.664524][T14387] input: GTCO_CalComp as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.219/input/input259 [ 1774.868742][T14387] usb 1-1: USB disconnect, device number 26 [ 1774.924521][T14387] gtco 1-1:0.219: gtco driver disconnected [ 1775.722281][T12155] usb 1-1: new high-speed USB device number 27 using dummy_hcd 15:40:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a005c3700000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000024f1f450e20ac1000000000000000000000000000000000000000000000000000000000000000000000000010f788c498f9a21db7d57afebe15d24dbdee0793138f8ead60c12d275791a76ba7e574f54bc3c0adf28ee811cfe43e5d89f6e2a899a0cde13c996ae23fd541f1c5f8c1f67dff6c79f8506ef8d60ccf7dc0f5281a9e59cc507b9a2c9c55af43fe8996ae04fe6716c16add1c1fe9bd5e345dd87ff006476ac84df8a9342d7a09fb9054f370c90c9"], 0xb8}}, 0x0) 15:40:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001ff7)='/dev/sg#\x00', 0x0, 0x2402) mmap(&(0x7f000029a000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clock_gettime(0x0, &(0x7f000029aff8)) 15:40:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000100)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r1, r2, 0x0) dup2(r0, r3) 15:40:09 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000000)=""/35, &(0x7f00000000c0)=0x23) 15:40:09 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 15:40:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x6800, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}}, 0x0) 15:40:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6b) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r1, 0x0, 0x3, 0x1}}, 0x20) [ 1776.357682][T13986] netlink: 'syz-executor.0': attribute type 21 has an invalid length. 15:40:09 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf7, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 15:40:09 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000000)="2000000012005f0214f9f407000000000a001000000000000100000008002000", 0x1717) 15:40:09 executing program 0: syz_usb_connect(0x0, 0xfcfc, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newtclass={0x38, 0x28, 0x0, 0x70bd2a, 0x0, {}, [@tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1f4712bdfe98af4b}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:40:09 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00ff0700000905830300911b00000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x50, 0xff7f, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 15:40:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200047bd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 15:40:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x880400000003, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830002200a0008000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 15:40:10 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1777.010092][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1777.240033][T14387] usb 2-1: new high-speed USB device number 122 using dummy_hcd 15:40:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6b) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1777.302983][ C1] protocol 88fb is buggy, dev hsr_slave_0 15:40:10 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0xffffffffffffff2f, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000002c0020fe141aac141412e0000001f5de6a0c15961ff499f27015a1f00ffb661be6e7", 0x5c4}], 0x1}, 0x0) 15:40:10 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1777.492435][T14387] usb 2-1: Using ep0 maxpacket: 8 [ 1777.624557][T14387] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1777.632861][T14387] usb 2-1: config 0 has no interface number 0 [ 1777.639069][T14387] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1792, setting to 1024 [ 1777.650405][T14387] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1777.661725][T14387] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1777.671037][T14387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.719024][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1777.821189][T14387] usb 2-1: config 0 descriptor?? [ 1777.871586][T14387] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input260 15:40:11 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0xffffffffffffff2f, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000002c0020fe141aac141412e0000001f5de6a0c15961ff499f27015a1f00ffb661be6e7", 0x5c4}], 0x1}, 0x0) [ 1778.074087][T14387] usb 2-1: USB disconnect, device number 122 [ 1778.082582][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1778.124595][T14387] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:40:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6b) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:11 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0xffffffffffffff2f, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000002c0020fe141aac141412e0000001f5de6a0c15961ff499f27015a1f00ffb661be6e7", 0x5c4}], 0x1}, 0x0) 15:40:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) poll(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1}) [ 1778.944657][T14387] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1779.222556][T14387] usb 2-1: Using ep0 maxpacket: 8 [ 1779.342496][T14387] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1779.350806][T14387] usb 2-1: config 0 has no interface number 0 [ 1779.357099][T14387] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1792, setting to 1024 [ 1779.370655][T14387] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1779.381895][T14387] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1779.391767][T14387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.402432][T14387] usb 2-1: config 0 descriptor?? [ 1779.459243][T14387] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input261 [ 1779.796043][T14387] usb 2-1: USB disconnect, device number 123 [ 1779.822614][T14387] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:40:13 executing program 0: syz_usb_connect(0x0, 0xfcfc, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newtclass={0x38, 0x28, 0x0, 0x70bd2a, 0x0, {}, [@tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1f4712bdfe98af4b}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:40:13 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0xffffffffffffff2f, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000002c0020fe141aac141412e0000001f5de6a0c15961ff499f27015a1f00ffb661be6e7", 0x5c4}], 0x1}, 0x0) 15:40:13 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) 15:40:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6b) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_newrule={0x48, 0x1e, 0x80d, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10015}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @FRA_DST={0x14, 0x1, @mcast1}]}, 0x48}}, 0x0) 15:40:13 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00ff0700000905830300911b00000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x50, 0xff7f, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 1780.577730][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:40:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x179, "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"}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:13 executing program 4: mmap(&(0x7f0000079000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 1780.842417][T14387] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1781.102826][T14387] usb 2-1: Using ep0 maxpacket: 8 15:40:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) [ 1781.224794][T14387] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1781.233269][T14387] usb 2-1: config 0 has no interface number 0 [ 1781.239918][T14387] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1792, setting to 1024 [ 1781.251162][T14387] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1781.262372][T14387] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1781.271513][T14387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:40:14 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 15:40:14 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x0, "70f3d0f554c3e3aa88d031bb057b60075d49df64f2b8ed24eb386634d481ae36eb76dfd2ae8d8a83ed4986c1958d6e046c005a9fa4b0d97d3e61090a042baf51f8499ad75e0cfb2b02922406e6b0580e"}, 0xd8) sendmsg$inet(r0, &(0x7f0000001a80)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x20004801) 15:40:14 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0xf3, 0xbe, 0x20, 0x411, 0x6, 0x2a19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0x9a, 0x3b, 0x55, 0x0, [], [{{0x9, 0x5, 0xc, 0x2}}, {{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) [ 1781.534110][T14387] usb 2-1: config 0 descriptor?? [ 1781.594030][T14387] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input262 [ 1781.786433][T12155] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1781.816176][T26420] usb 2-1: USB disconnect, device number 124 [ 1781.832597][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1781.833451][T26420] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1782.032421][T12155] usb 6-1: Using ep0 maxpacket: 32 [ 1782.152752][T12155] usb 6-1: config 0 has an invalid interface number: 166 but max is 0 [ 1782.161144][T12155] usb 6-1: config 0 has no interface number 0 [ 1782.168407][T12155] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1782.178446][T12155] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1782.188963][T12155] usb 6-1: New USB device found, idVendor=0411, idProduct=0006, bcdDevice=2a.19 [ 1782.198265][T12155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.210091][T12155] usb 6-1: config 0 descriptor?? [ 1782.255223][T12155] bulk out: wMaxPacketSize != 64 [ 1782.260233][T12155] bulk out: bEndpointAddress: 12 [ 1782.265607][T12155] Found a second bulk out ep, ignored [ 1782.271012][T12155] orinoco_usb: Didn't find the required bulk endpoints [ 1782.278117][T12155] orinoco_usb: probe of 6-1:0.166 failed with error -14 [ 1782.467317][T12155] usb 6-1: USB disconnect, device number 120 [ 1783.252387][T12155] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1783.492528][T12155] usb 6-1: Using ep0 maxpacket: 32 15:40:16 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 15:40:16 executing program 0: syz_usb_connect(0x0, 0xfcfc, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newtclass={0x38, 0x28, 0x0, 0x70bd2a, 0x0, {}, [@tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1f4712bdfe98af4b}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:40:16 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) 15:40:16 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00ff0700000905830300911b00000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x50, 0xff7f, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 15:40:16 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f0000000280), 0x9) [ 1783.596772][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1783.612827][T12155] usb 6-1: config 0 has an invalid interface number: 166 but max is 0 [ 1783.621117][T12155] usb 6-1: config 0 has no interface number 0 [ 1783.627766][T12155] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1783.637822][T12155] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1783.647950][T12155] usb 6-1: New USB device found, idVendor=0411, idProduct=0006, bcdDevice=2a.19 [ 1783.657140][T12155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:40:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) open(0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) shutdown(r0, 0x1) 15:40:16 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000)=0x1, 0x8, 0x0, 0x0, 0x0, 0x0) [ 1783.831843][T12155] usb 6-1: config 0 descriptor?? [ 1783.862661][T26420] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1783.877815][T12155] bulk out: wMaxPacketSize != 64 [ 1783.883165][T12155] bulk out: bEndpointAddress: 12 [ 1783.888187][T12155] Found a second bulk out ep, ignored [ 1783.893788][T12155] orinoco_usb: Didn't find the required bulk endpoints [ 1783.900821][T12155] orinoco_usb: probe of 6-1:0.166 failed with error -14 15:40:17 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000e00ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000500060000000000000005000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006400070500"/20, @ANYRES32=r4, @ANYBLOB="ecff1200071c0e00000000de"], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492619, 0x0) [ 1784.079058][T12155] usb 6-1: USB disconnect, device number 121 15:40:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4ef27f45294600000033086c0000000000000000010710051166010000003800000000000044090a000b00000800"/56], 0x9e) [ 1784.134644][T26420] usb 2-1: Using ep0 maxpacket: 8 [ 1784.256172][T26420] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1784.264447][T26420] usb 2-1: config 0 has no interface number 0 [ 1784.270658][T26420] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1792, setting to 1024 [ 1784.281922][T26420] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1784.293160][T26420] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb 15:40:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1784.302431][T26420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:40:17 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x14, 0x2, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1784.428160][T26420] usb 2-1: config 0 descriptor?? [ 1784.485987][T26420] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input263 [ 1784.557400][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 15:40:17 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0xf3, 0xbe, 0x20, 0x411, 0x6, 0x2a19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0x9a, 0x3b, 0x55, 0x0, [], [{{0x9, 0x5, 0xc, 0x2}}, {{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) [ 1784.713477][T26420] usb 2-1: USB disconnect, device number 125 [ 1784.722648][ C0] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1784.750311][T26420] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1785.022988][T14387] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1785.285906][T14387] usb 6-1: Using ep0 maxpacket: 32 [ 1785.413734][T14387] usb 6-1: config 0 has an invalid interface number: 166 but max is 0 [ 1785.422093][T14387] usb 6-1: config 0 has no interface number 0 [ 1785.428392][T14387] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1785.438569][T14387] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1785.448611][T14387] usb 6-1: New USB device found, idVendor=0411, idProduct=0006, bcdDevice=2a.19 [ 1785.457805][T14387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.467855][T14387] usb 6-1: config 0 descriptor?? [ 1785.527710][T14387] bulk out: wMaxPacketSize != 64 [ 1785.532766][T14387] bulk out: bEndpointAddress: 12 [ 1785.537794][T14387] Found a second bulk out ep, ignored [ 1785.543269][T14387] orinoco_usb: Didn't find the required bulk endpoints [ 1785.550301][T14387] orinoco_usb: probe of 6-1:0.166 failed with error -14 [ 1785.735979][T26420] usb 6-1: USB disconnect, device number 122 15:40:20 executing program 0: syz_usb_connect(0x0, 0xfcfc, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newtclass={0x38, 0x28, 0x0, 0x70bd2a, 0x0, {}, [@tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1f4712bdfe98af4b}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:40:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x5, 0x0, "6c08b29e0cab0a2b89faccd9701056c7b347068ebeb9e3be"}) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x1c, 0x8, 0x6}) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="bd000000", @ANYRES16=r2, @ANYBLOB="000100000000fedbdf250b00000034000200080006002231000008000400fca34a7a08000900ff07000008000b0000000000080009000000000008000e004e20000014000100080006006c63000008000600727200003c000100080001000a000000080004004e2400000c000700090000002400000014000300ffffffff00000000000000000000000008000b0073697000080005000900000008000400ff0700000800040000000080"], 0xb0}}, 0x8081) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0xa927, 0x29, 0x0, 0xffffffffffffffff}) r12 = dup(r11) syz_kvm_setup_cpu$x86(r12, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, &(0x7f00000000c0)={{0x2, 0x1, 0x7, 0x2, 0xfffffffd}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 15:40:20 executing program 2: r0 = socket(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x10004) sendfile(r0, r1, 0x0, 0x72439a6b) 15:40:20 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00ff0700000905830300911b00000000"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x50, 0xff7f, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 15:40:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 15:40:20 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0xf3, 0xbe, 0x20, 0x411, 0x6, 0x2a19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0x9a, 0x3b, 0x55, 0x0, [], [{{0x9, 0x5, 0xc, 0x2}}, {{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) 15:40:20 executing program 2: r0 = socket(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x10004) sendfile(r0, r1, 0x0, 0x72439a6b) [ 1787.068803][ C0] sd 0:0:1:0: [sg0] tag#3436 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 1787.078455][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB: Test Unit Ready [ 1787.085134][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.094930][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.104803][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.114624][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.124477][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.134276][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.147314][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.157102][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.166895][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.176661][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.186431][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.196237][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.205993][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.215757][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.225517][ C0] sd 0:0:1:0: [sg0] tag#3436 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 [ 1787.303207][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1787.309477][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1787.315963][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1787.322287][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1787.331593][T14387] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1787.339657][T11839] usb 2-1: new high-speed USB device number 126 using dummy_hcd 15:40:20 executing program 2: r0 = socket(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x10004) sendfile(r0, r1, 0x0, 0x72439a6b) [ 1787.592430][T11839] usb 2-1: Using ep0 maxpacket: 8 [ 1787.598002][T14387] usb 6-1: Using ep0 maxpacket: 32 [ 1787.714129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1787.721340][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1787.754668][T11839] usb 2-1: config 0 has an invalid interface number: 65 but max is 0 [ 1787.762924][T11839] usb 2-1: config 0 has no interface number 0 [ 1787.769257][T11839] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1792, setting to 1024 [ 1787.780545][T11839] usb 2-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1787.791950][T11839] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1787.801182][T11839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.810311][T14387] usb 6-1: config 0 has an invalid interface number: 166 but max is 0 [ 1787.818690][T14387] usb 6-1: config 0 has no interface number 0 [ 1787.824940][T14387] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1787.834951][T14387] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1787.844981][T14387] usb 6-1: New USB device found, idVendor=0411, idProduct=0006, bcdDevice=2a.19 15:40:20 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000040)='trusted.\xd7verlay.redirect\x00', 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000040)='security.ima\x02', 0x0, 0x0, 0x0) [ 1787.854214][T14387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:40:21 executing program 2: r0 = socket(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x10004) sendfile(r0, r1, 0x0, 0x72439a6b) [ 1788.018176][T14387] usb 6-1: config 0 descriptor?? [ 1788.025073][T11839] usb 2-1: config 0 descriptor?? [ 1788.066005][T14387] bulk out: wMaxPacketSize != 64 [ 1788.071036][T14387] bulk out: bEndpointAddress: 12 [ 1788.076243][T14387] Found a second bulk out ep, ignored [ 1788.081647][T14387] orinoco_usb: Didn't find the required bulk endpoints [ 1788.088827][T14387] orinoco_usb: probe of 6-1:0.166 failed with error -14 [ 1788.134666][T11839] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.65/input/input264 [ 1788.280794][T14387] usb 2-1: USB disconnect, device number 126 [ 1788.292581][ C1] xpad 2-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1788.302155][T11839] usb 6-1: USB disconnect, device number 123 [ 1788.315100][T14387] xpad 2-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:40:21 executing program 2: unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x400000000000000c, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c06, 0x0) 15:40:21 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c000092000000000aaaaaa9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000939f96c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e86aa5648900a6690000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b95aaf000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) 15:40:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) close(r0) 15:40:23 executing program 2: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000440)={0x0, 0x0, 0x0, 'queue0\x00'}) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'trusted.', 'wlan1bdevkeyring#-\x00'}, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) 15:40:23 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1a) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x1c, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @generic={0x4, 0x3, 'r'}]}}}}}}}}, 0x0) 15:40:23 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1c, 0xf3, 0xbe, 0x20, 0x411, 0x6, 0x2a19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x2, 0x9a, 0x3b, 0x55, 0x0, [], [{{0x9, 0x5, 0xc, 0x2}}, {{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) 15:40:23 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) tee(r1, r0, 0x100000000, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff}) dup2(r4, r1) close(r2) 15:40:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1790.405818][T16016] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 15:40:23 executing program 0: syz_usb_connect(0x0, 0x13d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201e3000e1c3208f20c50621859000000010902240001000000120904bb01026110000000050b02000000000009058a0978fb0200004f1480815655eb6f"], 0x0) 15:40:23 executing program 2: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x2, &(0x7f0000000040)=[{0x1}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 15:40:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuse\x00', 0x0, &(0x7f0000000840)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='system.advise\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) dup3(r0, r1, 0x0) [ 1790.702915][T26420] usb 6-1: new high-speed USB device number 124 using dummy_hcd 15:40:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_flags=0x4000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000040)={'bridge_slave_0\x00?', @ifru_map={0xc7}}) 15:40:24 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @local, {[@ssrr={0x89, 0x13, 0x0, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @generic={0x0, 0xb, "2be36901600a062efe"}, @ssrr={0x89, 0xb, 0x0, [@rand_addr, @empty]}]}}}}}}}, 0x0) [ 1790.942610][T26420] usb 6-1: Using ep0 maxpacket: 32 [ 1791.042359][T11839] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1791.072675][T26420] usb 6-1: config 0 has an invalid interface number: 166 but max is 0 [ 1791.080977][T26420] usb 6-1: config 0 has no interface number 0 [ 1791.087528][T26420] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1791.097981][T26420] usb 6-1: config 0 interface 166 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 1791.108037][T26420] usb 6-1: New USB device found, idVendor=0411, idProduct=0006, bcdDevice=2a.19 [ 1791.117245][T26420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:40:24 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) close(r0) 15:40:24 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @local, {[@ssrr={0x89, 0x13, 0x0, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @generic={0x0, 0xb, "2be36901600a062efe"}, @ssrr={0x89, 0xb, 0x0, [@rand_addr, @empty]}]}}}}}}}, 0x0) 15:40:24 executing program 1: symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_getrule={0x20, 0x22, 0x721}, 0x20}}, 0x0) [ 1791.192623][T26420] usb 6-1: config 0 descriptor?? [ 1791.264961][T26420] bulk out: wMaxPacketSize != 64 [ 1791.269983][T26420] bulk out: bEndpointAddress: 12 [ 1791.275167][T26420] Found a second bulk out ep, ignored [ 1791.280576][T26420] orinoco_usb: Didn't find the required bulk endpoints [ 1791.287683][T26420] orinoco_usb: probe of 6-1:0.166 failed with error -14 [ 1791.292666][T11839] usb 1-1: Using ep0 maxpacket: 8 15:40:24 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @local, {[@ssrr={0x89, 0x13, 0x0, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @generic={0x0, 0xb, "2be36901600a062efe"}, @ssrr={0x89, 0xb, 0x0, [@rand_addr, @empty]}]}}}}}}}, 0x0) [ 1791.443255][T11839] usb 1-1: config 0 has an invalid interface number: 187 but max is 0 [ 1791.451614][T11839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.462144][T11839] usb 1-1: config 0 has no interface number 0 [ 1791.468422][T11839] usb 1-1: config 0 interface 187 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1791.481650][T11839] usb 1-1: config 0 interface 187 has no altsetting 0 [ 1791.488569][T11839] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=59.18 [ 1791.497752][T11839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.549396][T14387] usb 6-1: USB disconnect, device number 124 [ 1791.663560][T11839] usb 1-1: config 0 descriptor?? [ 1791.705033][T11839] ums_eneub6250 1-1:0.187: USB Mass Storage device detected [ 1791.908271][T11839] usb 1-1: USB disconnect, device number 28 15:40:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 15:40:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x820, 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) write$selinux_attr(r3, &(0x7f00000000c0)='system_u:object_r:cron_spool_t:s0\x00', 0x22) 15:40:25 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 1792.262911][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1792.269329][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1792.802358][T11839] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1793.042377][T11839] usb 1-1: Using ep0 maxpacket: 8 [ 1793.162612][T11839] usb 1-1: config 0 has an invalid interface number: 187 but max is 0 [ 1793.170895][T11839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.181144][T11839] usb 1-1: config 0 has no interface number 0 [ 1793.187361][T11839] usb 1-1: config 0 interface 187 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1793.200651][T11839] usb 1-1: config 0 interface 187 has no altsetting 0 [ 1793.207617][T11839] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=59.18 [ 1793.216808][T11839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.225966][T11839] usb 1-1: config 0 descriptor?? [ 1793.264736][T11839] ums_eneub6250 1-1:0.187: USB Mass Storage device detected [ 1793.464270][T26420] usb 1-1: USB disconnect, device number 29 15:40:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 15:40:26 executing program 2: syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@source_quench={0x5, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @local, {[@ssrr={0x89, 0x13, 0x0, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @generic={0x0, 0xb, "2be36901600a062efe"}, @ssrr={0x89, 0xb, 0x0, [@rand_addr, @empty]}]}}}}}}}, 0x0) 15:40:26 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/46, 0x2e) getdents(r0, &(0x7f00000001c0)=""/254, 0xfe) 15:40:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x3, 0x2f}, @IFLA_LINKINFO={0x28, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x18, 0x2, [@tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]]}}}]}, 0x50}}, 0x0) 15:40:26 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:40:26 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7100000000000000079ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x28}}], 0x40000000000037b, 0xc000) 15:40:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f000072eff0)=[{&(0x7f0000000080)="480000001500257f09004b01fcfc8c860a0600000017e006000a2b61d2a1f25b15147344d739b3f9f600e30900000000000000000000ffff5bf109000000ed5e0000008e0d861500", 0x48}], 0x1) 15:40:26 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)={0x40, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, &(0x7f00000001c0), &(0x7f0000000180)=""/6}, 0x20) 15:40:27 executing program 0: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:40:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x34, 0x12, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6vti={{0xc, 0x1, 'ip6vti\x00'}, {0x4}}}]}, 0x34}}, 0x0) 15:40:28 executing program 3: unshare(0x400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) r1 = dup(r0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x80024321, 0x2) 15:40:28 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 15:40:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x100000000) 15:40:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$getflags(r0, 0x40a) 15:40:28 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="e7"], 0x1) close(r1) socket$kcm(0x29, 0x5, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfd) splice(r0, 0x0, r1, 0x0, 0x6b1d, 0x0) 15:40:28 executing program 0: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x7fff, 0x0, 0x9, 0x35, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xb) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0xe803000000000900, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x34000}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) 15:40:28 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001340)={0xa0, 0x0, 0x2, {{0x800000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a3d}}}}, 0xa0) 15:40:28 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a07601dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 15:40:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26) [ 1795.362947][T17334] CUSE: zero length info key specified 15:40:28 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:40:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0xaaaaaaaaaaaae2f, 0x0, 0x0, 0xffa3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6b) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x4}], 0x1f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:28 executing program 2: r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 1795.632748][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1795.638988][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1795.645894][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1795.652076][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:40:28 executing program 3: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000140)={0x0, 0x7, 0x0, 0x7fffffff, 0x80000000}) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000001740)=""/155, 0xfffffffffffffde3}, {&(0x7f00000001c0)=""/11, 0xffb5}, {&(0x7f0000000300)=""/102, 0x66}], 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5}, {&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) ioctl(r0, 0xc2604110, &(0x7f0000000000)) [ 1796.022988][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.029239][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1796.292726][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.298863][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1796.425964][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1796.432087][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:40:31 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 15:40:31 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x0, 0x0, @local, @local, {[], @tcp={{0x0, 0xc204, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:40:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1000000000000004) writev(r0, &(0x7f000072eff0)=[{&(0x7f0000000180)="480000001400050009004b01fcfc8c860a881700f217e0062000e30000e5ffffbb5603000000000000000000ffff5bf109000000ed5e000000006203005b00"/72, 0x48}], 0x1) 15:40:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x3, 0x0, &(0x7f0000000240)) 15:40:31 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 15:40:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 15:40:31 executing program 0: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00=\x00', @ifru_flags}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0xa}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x202080, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000400)={0x0, 0x0, @ioapic}) 15:40:31 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 15:40:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1, 0x2}, 0x12d48122) 15:40:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b0071") sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="ba02000000000000001c857b", 0xc}], 0x1}, 0x0) 15:40:31 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=',', 0x1}], 0x1) 15:40:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940", 0x9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x91, 0x0, 0xffffffffffffffef}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1798.742484][T12155] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1799.002302][T12155] usb 4-1: Using ep0 maxpacket: 16 [ 1799.122644][T12155] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 1799.130895][T12155] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 1799.139341][T12155] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1799.148411][T12155] usb 4-1: config 0 has no interface number 1 [ 1799.154689][T12155] usb 4-1: config 0 has no interface number 2 [ 1799.160877][T12155] usb 4-1: config 0 interface 225 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1799.174350][T12155] usb 4-1: too many endpoints for config 0 interface 200 altsetting 92: 230, using maximum allowed: 30 [ 1799.185598][T12155] usb 4-1: config 0 interface 200 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1799.199080][T12155] usb 4-1: config 0 interface 225 has no altsetting 0 [ 1799.206021][T12155] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1799.212813][T12155] usb 4-1: config 0 interface 200 has no altsetting 0 [ 1799.219690][T12155] usb 4-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=37.00 [ 1799.228927][T12155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.238367][T12155] usb 4-1: config 0 descriptor?? [ 1799.285747][T12155] usb 4-1: selecting invalid altsetting 0 [ 1799.291653][T12155] usb 4-1: Could not set interface, error -22 [ 1799.522739][T12155] usb 4-1: string descriptor 0 read error: -71 [ 1799.536395][T12155] usb 4-1: USB disconnect, device number 74 [ 1800.252296][T12155] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1800.492286][T12155] usb 4-1: Using ep0 maxpacket: 16 [ 1800.612515][T12155] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 1800.620959][T12155] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 1800.629513][T12155] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1800.638587][T12155] usb 4-1: config 0 has no interface number 1 [ 1800.644938][T12155] usb 4-1: config 0 has no interface number 2 [ 1800.651117][T12155] usb 4-1: config 0 interface 225 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1800.664540][T12155] usb 4-1: too many endpoints for config 0 interface 200 altsetting 92: 230, using maximum allowed: 30 [ 1800.675708][T12155] usb 4-1: config 0 interface 200 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1800.689182][T12155] usb 4-1: config 0 interface 225 has no altsetting 0 [ 1800.696072][T12155] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1800.702855][T12155] usb 4-1: config 0 interface 200 has no altsetting 0 [ 1800.709711][T12155] usb 4-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=37.00 [ 1800.718936][T12155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.728260][T12155] usb 4-1: config 0 descriptor?? [ 1800.776243][T12155] usb 4-1: selecting invalid altsetting 0 [ 1800.782143][T12155] usb 4-1: Could not set interface, error -22 [ 1801.012662][T12155] usb 4-1: string descriptor 0 read error: -71 [ 1801.027112][T12155] usb 4-1: USB disconnect, device number 75 15:40:34 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 15:40:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1, 0x2}, 0x12d48122) 15:40:34 executing program 0: unshare(0x28020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0xc00caee0, 0x0) 15:40:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r4, {}, {0x0, 0x2}}}, 0x24}}, 0x0) 15:40:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x113}], 0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:40:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1, 0x2}, 0x12d48122) 15:40:34 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000240)=@v2, 0x14, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='security.capability\x00', 0x0, 0x0) 15:40:34 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 15:40:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8048ae66, 0x0) 15:40:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1, 0x2}, 0x12d48122) 15:40:34 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x68, r4, 0x5, 0x0, 0x0, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 15:40:34 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @multicast1}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) [ 1801.902833][T12155] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1801.909825][T18258] dccp_invalid_packet: P.Data Offset(68) too large [ 1801.922448][T18258] dccp_invalid_packet: P.Data Offset(68) too large [ 1802.162448][T12155] usb 4-1: Using ep0 maxpacket: 16 [ 1802.282788][T12155] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 1802.291119][T12155] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 1802.299531][T12155] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1802.308601][T12155] usb 4-1: config 0 has no interface number 1 [ 1802.314929][T12155] usb 4-1: config 0 has no interface number 2 [ 1802.321099][T12155] usb 4-1: config 0 interface 225 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1802.334541][T12155] usb 4-1: too many endpoints for config 0 interface 200 altsetting 92: 230, using maximum allowed: 30 [ 1802.345708][T12155] usb 4-1: config 0 interface 200 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1802.359190][T12155] usb 4-1: config 0 interface 225 has no altsetting 0 [ 1802.366130][T12155] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1802.372916][T12155] usb 4-1: config 0 interface 200 has no altsetting 0 [ 1802.379812][T12155] usb 4-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=37.00 [ 1802.389040][T12155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.398474][T12155] usb 4-1: config 0 descriptor?? [ 1802.446185][T12155] usb 4-1: selecting invalid altsetting 0 [ 1802.452082][T12155] usb 4-1: Could not set interface, error -22 [ 1802.682634][T12155] usb 4-1: string descriptor 0 read error: -71 [ 1802.714523][T12155] usb 4-1: USB disconnect, device number 76 15:40:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) fcntl$setstatus(r2, 0x408, 0x0) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) close(r1) 15:40:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b4560a117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710080000000001ffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 15:40:37 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @multicast1}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) 15:40:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000001ee8)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, @in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x200000000000000}, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xd8}}, 0x0) 15:40:37 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000684c2b10c6050b920037000000010902240001000000000904e1ff01ff0531000904000100000000000904c85ce64ed36e5873d6e7c2f400760000000000113ab26aab287c2e7a811ba4ef6c29045f3ad4bae72cf2f3ddc2f6ec06045e2b41c514c1c4c37a5309b06b5bc7fc7c7a3f5e835198625e7d464f3b66d74ea098be10822d841e5dc159ad4cd2a3c3ba1925be9592571f34241c5ac80a657d9e96aa1c481cde7d614b6f296114f83ef7654fa3e4066155c30b6ad051d493458dca9e10ebc524caf7f9bf12ed4f6fb64ed73582996105c8377858a8d9e7c07e709414db3feeb1667ec9d8dfceefed7ce2b2362c760ce0a2a316"], 0x0) 15:40:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/tcp6\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$FUSE(r0, &(0x7f0000000000), 0x1542) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1804.429965][T18275] dccp_invalid_packet: P.Data Offset(68) too large 15:40:37 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @multicast1}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) 15:40:37 executing program 1: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed12f0000000000ae47a825d86800278dcff47d01855c43ef792d2d5ff00000805ae64f8f36460234c32479ae4351b0c84eba48cc4c26bed75d492b41fd983f79e65199615607672c59957ab35f4ad614fd33cebbc150bb2b03b5b2461179f5f90bba001b", 0x70}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1804.654554][T18663] dccp_invalid_packet: P.Data Offset(68) too large [ 1804.687638][T12155] usb 4-1: new high-speed USB device number 77 using dummy_hcd 15:40:37 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 15:40:37 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)={{0x12, 0x1, 0x0, 0x12, 0xaa, 0x3c, 0x10, 0x1686, 0xdd, 0x6155, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xcb, 0x60, 0x40}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:40:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x2000400) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSF(r1, 0x80047456, &(0x7f0000000040)) 15:40:37 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @multicast1}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) [ 1804.932468][T12155] usb 4-1: Using ep0 maxpacket: 16 15:40:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) [ 1804.964893][T18750] dccp_invalid_packet: P.Data Offset(68) too large 15:40:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2, &(0x7f000079bffc), &(0x7f0000000080)=0x4) [ 1805.133235][T14387] usb 5-1: new high-speed USB device number 4 using dummy_hcd 15:40:38 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x33c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) [ 1805.402640][T14387] usb 5-1: Using ep0 maxpacket: 16 [ 1805.431297][T12155] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 1805.439684][T12155] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 1805.448077][T12155] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1805.457179][T12155] usb 4-1: config 0 has no interface number 1 [ 1805.463462][T12155] usb 4-1: config 0 has no interface number 2 15:40:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20}) [ 1805.469691][T12155] usb 4-1: config 0 interface 225 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1805.483105][T12155] usb 4-1: too many endpoints for config 0 interface 200 altsetting 92: 230, using maximum allowed: 30 [ 1805.494332][T12155] usb 4-1: config 0 interface 200 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1805.507829][T12155] usb 4-1: config 0 interface 225 has no altsetting 0 [ 1805.514814][T12155] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1805.521513][T12155] usb 4-1: config 0 interface 200 has no altsetting 0 [ 1805.528525][T12155] usb 4-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=37.00 [ 1805.537735][T12155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.546103][T14387] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1805.554508][T14387] usb 5-1: config 0 has no interface number 0 [ 1805.560763][T14387] usb 5-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=61.55 [ 1805.570137][T14387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.579902][T12155] usb 4-1: config 0 descriptor?? [ 1805.626796][T12155] usb 4-1: selecting invalid altsetting 0 [ 1805.632760][T12155] usb 4-1: Could not set interface, error -22 [ 1805.701375][T14387] usb 5-1: config 0 descriptor?? [ 1805.863073][T12155] usb 4-1: string descriptor 0 read error: -71 [ 1805.904854][T12155] usb 4-1: USB disconnect, device number 77 [ 1806.177233][T14387] usb 5-1: USB disconnect, device number 4 15:40:39 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 15:40:39 executing program 2: r0 = socket(0x840000000002, 0x3, 0xff) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 15:40:39 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x300a, 0x7}}) 15:40:39 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 15:40:39 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)) [ 1806.712684][T12155] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1806.952349][T12155] usb 4-1: Using ep0 maxpacket: 16 [ 1806.957848][T12032] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1807.072728][T12155] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 1807.081109][T12155] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 1807.089634][T12155] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1807.098716][T12155] usb 4-1: config 0 has no interface number 1 [ 1807.104997][T12155] usb 4-1: config 0 has no interface number 2 [ 1807.111258][T12155] usb 4-1: config 0 interface 225 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1807.124776][T12155] usb 4-1: too many endpoints for config 0 interface 200 altsetting 92: 230, using maximum allowed: 30 [ 1807.135976][T12155] usb 4-1: config 0 interface 200 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 1807.149639][T12155] usb 4-1: config 0 interface 225 has no altsetting 0 [ 1807.156536][T12155] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1807.163299][T12155] usb 4-1: config 0 interface 200 has no altsetting 0 [ 1807.170290][T12155] usb 4-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=37.00 [ 1807.179527][T12155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.189267][T12155] usb 4-1: config 0 descriptor?? [ 1807.235866][T12155] usb 4-1: selecting invalid altsetting 0 [ 1807.241790][T12155] usb 4-1: Could not set interface, error -22 [ 1807.312454][T12032] usb 5-1: Using ep0 maxpacket: 16 [ 1807.432867][T12032] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1807.440995][T12032] usb 5-1: config 0 has no interface number 0 [ 1807.447351][T12032] usb 5-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=61.55 [ 1807.456637][T12032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.466258][T12032] usb 5-1: config 0 descriptor?? [ 1807.482611][T12155] usb 4-1: string descriptor 0 read error: -71 [ 1807.496852][T12155] usb 4-1: USB disconnect, device number 78 [ 1807.736232][T12032] usb 5-1: USB disconnect, device number 5 15:40:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008970, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 15:40:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, [{0x4, 0x1c}, {0x4, 0xa}]}]}, 0x2c}}, 0x0) 15:40:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="1b000000540081aee4056c00040000fe078bffff0d000000f000c3", 0x1b}], 0x1}, 0x0) 15:40:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:40:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() waitid(0x2, r2, &(0x7f0000000040), 0x2, 0x0) [ 1807.914255][T19056] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1807.923755][T19056] PF_BRIDGE: br_mdb_parse() with invalid attr 15:40:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() waitid(0x2, r2, &(0x7f0000000040), 0x2, 0x0) 15:40:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0f01d866b9800000c00f326635000100000f30ded90ff49500300fc7b671070f20d86635080000000f22d8ba6100ec0f001f633ff30f09", 0x37}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:40:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, [{0x4, 0x1c}, {0x4, 0xa}]}]}, 0x2c}}, 0x0) 15:40:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) 15:40:41 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./file0/bus/file0\x00', &(0x7f00000003c0)='./file0/bus\x00') 15:40:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, &(0x7f0000000040)) 15:40:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() waitid(0x2, r2, &(0x7f0000000040), 0x2, 0x0) 15:40:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, [{0x4, 0x1c}, {0x4, 0xa}]}]}, 0x2c}}, 0x0) 15:40:41 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./file0/bus/file0\x00', &(0x7f00000003c0)='./file0/bus\x00') 15:40:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8808}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000280)="a6d6915f41c49e5289c21f050b1963a28ae09fa4e782cbd99bdedbbd59125e2a45", 0x21}], 0x1}, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="59000000140019232b834b80043f679a08ff6400940005002a925aaa000000000100008400f0fffeff2c707f8f00ff050000000010000100090a1000410400000000fcff00000000000000000000000000000000000000000f", 0x59}], 0x1) 15:40:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, [{0x4, 0x1c}, {0x4, 0xa}]}]}, 0x2c}}, 0x0) 15:40:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() waitid(0x2, r2, &(0x7f0000000040), 0x2, 0x0) 15:40:41 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./file0/bus/file0\x00', &(0x7f00000003c0)='./file0/bus\x00') 15:40:41 executing program 2: r0 = socket(0x10, 0x800000000080003, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_regs}) 15:40:41 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0205647, &(0x7f00000001c0)={0xf010000, 0x0, "db2ad46b2d858dcab5b7537361e5e15b8f9f64acfc6a78558cc5f05040a46833"}) 15:40:42 executing program 5: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4000000000020}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") ioctl(r0, 0xffffffffffffffb9, &(0x7f0000000080)) 15:40:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 15:40:42 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) rename(&(0x7f0000000240)='./file0/bus/file0\x00', &(0x7f00000003c0)='./file0/bus\x00') 15:40:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x5, 0x3d, 0x8000000001}, 0x3c) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x6}, 0x2) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x400000077fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f00000000c0)}, 0x10) 15:40:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffff6}, 0x48) 15:40:42 executing program 0: r0 = socket$inet(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="24000000190007041dfffd946f6105000a0000001f00000000000800080015000404ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:40:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x7, 0x5}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 15:40:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) [ 1809.498885][T19636] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 1809.507546][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 15:40:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @local}}) 15:40:42 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000, 0x3e00}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet(0x2, 0x3, 0x2) 15:40:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x7, 0x5}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 15:40:42 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) writev(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000002c0)="cd", 0x1}], 0x2) 15:40:42 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x88be, 0xc, 0x0, [], "53ff63b5"}}}}}, 0x0) 15:40:42 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x7, 0x5}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 15:40:42 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x88be, 0xc, 0x0, [], "53ff63b5"}}}}}, 0x0) 15:40:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = syz_usb_connect(0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) syz_usb_disconnect(r1) 15:40:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001bfa963ec0c00010000030a93a1605b0000"], 0x14}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") 15:40:43 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 15:40:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) 15:40:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbd}, [@ldst={0x7, 0x5}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 15:40:43 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x88be, 0xc, 0x0, [], "53ff63b5"}}}}}, 0x0) 15:40:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='\xc8\x94\xff\xff\xff\xff\xff\xff\xd6', 0x682102, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000300)={0xbeb2}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x3f, 0x0, 0x3ff, 0x8, 0x8}) 15:40:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x1, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x1e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/140}, 0x18) 15:40:43 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x88be, 0xc, 0x0, [], "53ff63b5"}}}}}, 0x0) 15:40:43 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 15:40:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='pagemap\x00') read$char_usb(r0, &(0x7f0000000840)=""/4096, 0x501500) 15:40:44 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x10001, 0x4) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e) connect$unix(r0, &(0x7f0000001240)=@abs={0x1}, 0x6e) 15:40:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000190001ffff04000000000000ff010000000000a85400000000000001e000000100000000000000000000000000000000000000000a0000000000000029430f7a21dda26d37ff6842a842fdfe0632078a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000e33eb88500a22580106acb896827348a8f4df0744c73a5fd4bb1bff83e874c60070d634a3c9097ad93ec3d5d4488fa286145aaa8bf5bf03374a977b588c801e1f42c54460d9ea61c9749ae06a2289c3395839605854e8c617261f43bad0fd3ba5ade9fbb68c08e83"], 0xb8}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) 15:40:44 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'ip6gre0\x00'}}, 0x1e) dup3(r2, r3, 0x0) dup3(r0, r1, 0x0) 15:40:44 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 15:40:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000020307031dfffd944ef20c0020200a0009000500021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) 15:40:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @ioapic={0x3000}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:45 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80045400, 0x0) 15:40:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x331fd3708f299928}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:40:45 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) [ 1812.711252][T20881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1812.737878][T20881] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1812.832991][T20878] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 15:40:45 executing program 3: syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) unshare(0x40600) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) epoll_create1(0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000500), 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000cd8ff4)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000007000)) pselect6(0x40, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)={0x607}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400), 0x8}) [ 1812.887112][T20881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1812.914514][T20881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 15:40:46 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) 15:40:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\b\xac\x0f\x00'}]}, 0x269}}, 0x0) 15:40:46 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 15:40:46 executing program 3: r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000dfcff0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:40:46 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) fcntl$setstatus(r0, 0x4, 0x2400) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 15:40:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:40:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x6b, "7bef600f5c489544328013f37fed9f0358662e0bad191c350cca6242b5e9453f276e723a012cdf16e60afd55be8c1fdfbb35e49259c616b9dcb5b20d9f656703a3fe5ceb1e721dc1b16c50ad1671a812112aa72850a954cba528d15ada1142ee0d359897a7c6d8e913367b"}, 0x71) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:40:46 executing program 3: r0 = socket(0x11, 0x80a, 0x0) r1 = dup(r0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x28342) read(r2, &(0x7f0000000040)=""/87, 0x57) ioctl$int_in(r2, 0x800060c004500a, &(0x7f0000000100)) ioctl$int_in(r2, 0x800000c0045005, &(0x7f00000000c0)=0x9) ioctl$int_in(r2, 0x800060c004500a, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:40:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x8008808) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) [ 1813.682601][T14387] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1813.834165][T21325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1813.855366][T21325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1813.970234][T21325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1813.991220][T21325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 15:40:47 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xdd, 0x1f, 0xe7, 0x8, 0x1ae7, 0x525, 0x1e0b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x85, 0xb1, 0x9c}}]}}]}}, 0x0) 15:40:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:40:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) [ 1814.334757][T21612] input: syz0 as /devices/virtual/input/input265 [ 1814.395989][T21607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1814.412433][T21607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1814.437652][T14387] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 1814.445974][T14387] usb 1-1: config 0 has no interface number 0 [ 1814.452164][T14387] usb 1-1: config 0 interface 108 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1814.465385][T14387] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 4.c3 [ 1814.474501][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.519285][T21607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1814.535946][T21607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1814.583203][T11839] usb 6-1: new high-speed USB device number 125 using dummy_hcd 15:40:47 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r1, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) [ 1814.650057][T14387] usb 1-1: config 0 descriptor?? 15:40:47 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0x125f) [ 1814.698889][T14387] ttusbir 1-1:0.108: cannot find expected altsetting [ 1814.832971][T11839] usb 6-1: Using ep0 maxpacket: 8 [ 1814.901869][T12155] usb 1-1: USB disconnect, device number 30 [ 1814.963119][T11839] usb 6-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=1e.0b [ 1814.972428][T11839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.982637][T11839] usb 6-1: config 0 descriptor?? [ 1815.037974][T11839] HFC-S_USB: probe of 6-1:0.0 failed with error -5 [ 1815.235964][T11839] usb 6-1: USB disconnect, device number 125 [ 1815.762436][T14387] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1816.002443][T12155] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1816.132774][T14387] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 1816.141019][T14387] usb 1-1: config 0 has no interface number 0 [ 1816.147334][T14387] usb 1-1: config 0 interface 108 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1816.160576][T14387] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 4.c3 [ 1816.169727][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.181040][T14387] usb 1-1: config 0 descriptor?? [ 1816.226605][T14387] ttusbir 1-1:0.108: cannot find expected altsetting [ 1816.242379][T12155] usb 6-1: Using ep0 maxpacket: 8 [ 1816.372800][T12155] usb 6-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=1e.0b [ 1816.382017][T12155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.391741][T12155] usb 6-1: config 0 descriptor?? 15:40:49 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 15:40:49 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000024ef7f20030478fa2b00cf9d00010902120001000000000904e800003ea37800"], 0x0) 15:40:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15:40:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2}, 0x20) 15:40:49 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') exit(0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/234, 0xea}], 0x1, 0x4f) [ 1816.429006][T14387] usb 1-1: USB disconnect, device number 31 [ 1816.468058][T12155] HFC-S_USB: probe of 6-1:0.0 failed with error -5 [ 1816.615104][T21731] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1816.642638][T21731] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1816.686069][T12155] usb 6-1: USB disconnect, device number 126 [ 1816.788148][T21731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1816.806885][T21731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 15:40:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2}, 0x20) 15:40:49 executing program 1: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="a1"], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2}, 0x20) 15:40:50 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\xe4\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) 15:40:50 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000000c0)) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x50, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x400000000000290, 0x0) [ 1817.242387][T14387] usb 1-1: new high-speed USB device number 32 using dummy_hcd 15:40:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x800, 0x0, 0x3, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x2}, 0x20) 15:40:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140)=0xd, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x10, 0x4) [ 1817.652882][T14387] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 1817.661265][T14387] usb 1-1: config 0 has no interface number 0 [ 1817.667598][T14387] usb 1-1: config 0 interface 108 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1817.680815][T14387] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 4.c3 [ 1817.690027][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.883207][T14387] usb 1-1: config 0 descriptor?? [ 1817.936770][T14387] ttusbir 1-1:0.108: cannot find expected altsetting [ 1818.139360][T12155] usb 1-1: USB disconnect, device number 32 15:40:51 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) 15:40:51 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x341000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) 15:40:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000000)) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r4, &(0x7f00000000c0)={&(0x7f0000000240)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @mcast1}]}, &(0x7f00000001c0)=0x10) sendfile(r0, r1, 0x0, 0x102000002) 15:40:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0f, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 15:40:51 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\xe4\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) 15:40:51 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) dup3(r0, r2, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000300)="1c", 0x1}]) [ 1818.731056][T22320] batadv0: Caught tx_queue_len zero misconfig 15:40:51 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\xe4\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) 15:40:52 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)="1ed4531fa59d2e8b4c5bea538c1a0f2aa99cde09b2b3ea", 0x17}], 0x1}}], 0x1, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00\x00\x00\x00\x00r\xed\x02\x00', @ifru_flags}) 15:40:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) [ 1819.112947][T12155] usb 1-1: new high-speed USB device number 33 using dummy_hcd 15:40:52 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\xe4\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) 15:40:52 executing program 3: r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id, 0x10) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) 15:40:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000000)) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r4, &(0x7f00000000c0)={&(0x7f0000000240)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @mcast1}]}, &(0x7f00000001c0)=0x10) sendfile(r0, r1, 0x0, 0x102000002) [ 1819.487182][T12155] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 1819.495795][T12155] usb 1-1: config 0 has no interface number 0 [ 1819.502009][T12155] usb 1-1: config 0 interface 108 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1819.515279][T12155] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 4.c3 [ 1819.524454][T12155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.562827][T12155] usb 1-1: config 0 descriptor?? [ 1819.677670][T12155] ttusbir 1-1:0.108: cannot find expected altsetting [ 1819.815368][T11839] usb 1-1: USB disconnect, device number 33 15:40:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x2, [{0x560}]}) 15:40:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x701, 0x0, 0x0, {0x8, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) 15:40:53 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, 0x0) 15:40:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000000)) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r4, &(0x7f00000000c0)={&(0x7f0000000240)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @mcast1}]}, &(0x7f00000001c0)=0x10) sendfile(r0, r1, 0x0, 0x102000002) 15:40:53 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100006b3b1240480b0320c3040000000109021b00010000000009046c00015e53050009d97c2bc2637a8947ca4d091b3735ff00568b4038d8671e5db4af0993b626be52c7a07a5c2a8874d4187e64942d07a9553f0474eabf0c75b3a1e6a53f560a96e5230fc4d6746596ddd900e8074b27cf890bd2ddc7c731321c8dcaecac70560288c54fb7f1ca9a070cc4b1270d0197508996f43cc4f2fb3e02249479cb1614538348317e2d74895d010b9498c8ef28441a9782c9c1f8049cdd53365dd17a4a46f4af213f4daccc41f7ce8500d74c57f73cef38eeae57990914503280817aa4c02f17d99c40a8c92d322bdda2367dc300d0b41167ee6fa98e6b819ba0af132426962d867a05ca0f32e450d33b8004"], 0x0) 15:40:53 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x10) [ 1820.372728][T22869] input: syz0 as /devices/virtual/input/input270 15:40:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x701, 0x0, 0x0, {0x8, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) 15:40:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005740)=[{{&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x2, 0x0) 15:40:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000000)) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r4, &(0x7f00000000c0)={&(0x7f0000000240)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @mcast1}]}, &(0x7f00000001c0)=0x10) sendfile(r0, r1, 0x0, 0x102000002) 15:40:53 executing program 4: r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000001bff4)={0x2007}) signalfd(r1, &(0x7f0000392ff8)={0xffffffffffff0000}, 0x8) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffe}, 0x0, 0x8) tkill(r0, 0x1000000000014) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) [ 1820.863009][T11839] usb 1-1: new high-speed USB device number 34 using dummy_hcd 15:40:53 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}}, 0x0) 15:40:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x701, 0x0, 0x0, {0x8, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) 15:40:54 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0xc0046d00, &(0x7f0000a07fff)) 15:40:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x701, 0x0, 0x0, {0x8, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) 15:40:54 executing program 3: sendto(0xffffffffffffffff, &(0x7f00000000c0)="1fe791d29281df1851a090bb41d4d9ac7a551163a114043372849b9841e0d9f612599882b80a067ffb93691f08617a1c29e1b6641667566c29ad109fb6804abcd9f7ae902110066eaa992555f49be8babceead6a5612b014151ce0b93d8a95eaaa4c5dc608a2d35d48ec183cf5", 0x6d, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x10000000000003, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_data=&(0x7f0000000100)="40ba5d5420d6d9d4fe423a83943b335c6f36c26e613c0a5dedf0b2135b8f2387"}) [ 1821.233497][T11839] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 1821.241806][T11839] usb 1-1: config 0 has no interface number 0 [ 1821.248242][T11839] usb 1-1: config 0 interface 108 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1821.261527][T11839] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 4.c3 [ 1821.270963][T11839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:40:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000bc0)="230000004300817478d13276ca81deff020000000d0001000000006003000020c9f76c", 0x23}], 0x1}, 0x0) [ 1821.456228][T11839] usb 1-1: config 0 descriptor?? [ 1821.498848][T11839] ttusbir 1-1:0.108: cannot find expected altsetting [ 1821.708851][T12155] usb 1-1: USB disconnect, device number 34 15:40:55 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2}) 15:40:55 executing program 3: sendto(0xffffffffffffffff, &(0x7f00000000c0)="1fe791d29281df1851a090bb41d4d9ac7a551163a114043372849b9841e0d9f612599882b80a067ffb93691f08617a1c29e1b6641667566c29ad109fb6804abcd9f7ae902110066eaa992555f49be8babceead6a5612b014151ce0b93d8a95eaaa4c5dc608a2d35d48ec183cf5", 0x6d, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x10000000000003, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_data=&(0x7f0000000100)="40ba5d5420d6d9d4fe423a83943b335c6f36c26e613c0a5dedf0b2135b8f2387"}) 15:40:55 executing program 5: pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f4534ff0000f3ff020000000000000000380200026a87406557d9e9dba1de9fa7351d528400000000000000180000408f48895905ac410000000000"], 0x3c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:40:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_set$uid(0x0, 0x0, 0x2e0) 15:40:55 executing program 4: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00000000000905830300911b00000000f07ea2ac5d02206d8a5085fd1e92759c2b28f368ab64fcbe75e95398195ce7c30cffc01434b1050b2bd66611aa3c1429700205111609cc14b0418c9a384d4d279a040edbfa56ba3688bb82b94c8c4025b90bd94c17746c52dacf46833f2feee9e2867b7a643179b92c75f6a0d71182adf3b711d6b1a88f1a909cf91552c260739b33c18dc4c4f2b76bbea80ec8112902f31615f4178650eb15318119123116704815a09c0da318d26d00f31bc6673b802afcc07705b0e0b0bcb6e67d1d14c41c2380bfe2a89c5f58250664a7b5d8b823ce8fb7089ad6722b68101ef7045b76d7a6272219b54e9a29f1a05c4742507b292277dbfd30ca77b8a08d8bff701b98cb6230879dac7f7e539a5f6b965543c8176fdc0b88631484cba16298a632e31a2b6296e7fdbd355e051b6cc22616c9f9a800bbd2935c5d81d56937f4"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)) 15:40:55 executing program 3: sendto(0xffffffffffffffff, &(0x7f00000000c0)="1fe791d29281df1851a090bb41d4d9ac7a551163a114043372849b9841e0d9f612599882b80a067ffb93691f08617a1c29e1b6641667566c29ad109fb6804abcd9f7ae902110066eaa992555f49be8babceead6a5612b014151ce0b93d8a95eaaa4c5dc608a2d35d48ec183cf5", 0x6d, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x10000000000003, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_data=&(0x7f0000000100)="40ba5d5420d6d9d4fe423a83943b335c6f36c26e613c0a5dedf0b2135b8f2387"}) 15:40:55 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="24000000050607031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 15:40:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xb, 0x808, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) [ 1822.602697][T11839] usb 5-1: new high-speed USB device number 6 using dummy_hcd 15:40:55 executing program 3: sendto(0xffffffffffffffff, &(0x7f00000000c0)="1fe791d29281df1851a090bb41d4d9ac7a551163a114043372849b9841e0d9f612599882b80a067ffb93691f08617a1c29e1b6641667566c29ad109fb6804abcd9f7ae902110066eaa992555f49be8babceead6a5612b014151ce0b93d8a95eaaa4c5dc608a2d35d48ec183cf5", 0x6d, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x10000000000003, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_data=&(0x7f0000000100)="40ba5d5420d6d9d4fe423a83943b335c6f36c26e613c0a5dedf0b2135b8f2387"}) [ 1822.654674][T23860] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 15:40:55 executing program 1: r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 15:40:55 executing program 5: pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f4534ff0000f3ff020000000000000000380200026a87406557d9e9dba1de9fa7351d528400000000000000180000408f48895905ac410000000000"], 0x3c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:40:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) [ 1822.862728][T11839] usb 5-1: Using ep0 maxpacket: 8 15:40:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000140)={0x0, 0x2, 0x191a, {}, [], "573039bd83ccee1338a18b3e1303d50f7a080e349eeb1ca508debebe7aad204e56a434901b370469d486402cc85452cb499a1e4c51f2458c3acc31b1735b1c0182a498a8bafc2d01355ffebb952e908ed8c3947292c0d79260902e3bd2946743919df608c1bededd1d6d7076665bb9f0f3e6ad9198160b65ddeb700b62600ab9536736194e16f0d0d06c252677337ff2ecddc007615ace3ab4ae99055e269887ca9f27fd69d063ead629a959f267334e3839adc8b4a10afaea71dadd0e08fc653eaea63e0a2061ff348cb558d26af3ed06e19d5d3c08fcaf3d6061dc5b4be9a63ebbe9cee63c99d9bf75eb19c1a0f264741babd4ea383a91b3fdd7c9ecb60de8c4a4f851e9eb230b1212127fa66b428ed7198b65cd5d87ddd6228dc36651e9215caa91ba8409bb9d3fcbd342406bbef824cc2c93ea318bd045b38dab4bba7cc8692f87ad342c41a725dcf57dee9d80a82eabd8928612aacda2f536ca6f34c424a3e31a8667b4856a1e1d9cd2a0ac7cfacc84a86792b28ecbc74b336e4b591c824879355950b0483e90367c5b002625fadc8247aae0df5776552fe32de65925ca5b00afb658b1279297444fa1ef0600468c15f90a6f8dc9bc219109636d979ad79035c5b2bb07aebba4ad6ac2009e0a1165e6367241423a0d58131281db48370b9955d1746388379b0d5ca408b02ad37b4932ca116883568313c31fde8771efe41f6c04896425c31b4992d0bc475a9c053233e0b7d9f0d7da12f668791747fa7e99fb3c6d0206fd5603a4ae88dc7f3e6a4f800d8648c149f021299a10cb194ac5816b9c90cfad4201ac37ef13162c4a51392a51ce2ffec5bd8eab9a33f317d1d8d967695c5e7426e26f2d3349ce44443e2cb118b97183598e48dddc177fc1fbd39f0115c39f961c63510778fcc29e25651c67c6874b963c830bc1e8efb71c28a89e742a02a70de08cd553eb795b76e8fe8ef07242762f438723c67f2135574a92e4821ebac94e6be729920770bf26888ebe3dc75ec8c66d8ba715b8cc220a585d799cff848931130a797d3989b55a3a23e8595c33cf31c2ec4aa761032f49b29e1b713034e1cc6e2dacbd1d1146bbbf281ecc34b82b6e1fae8d2370dfc443c0dbb4d971ead73bef0b67c74f3ae40b35016037587875feb53ab764810ad3c5267d25394ff3c2e19a09650c425bb0be7ebfe12d3f86c80a3ff5ff8400dcc924140ff5317c3bba520ad7cfa02a419e35a6a9f264cd36bae651fd05fcf19a9bb766a0e9bd6c9cc32d20985a1b1f1d833eb9209fcb94fff52a666117dfb3c3b73f668e95a415fbb38c3e6160003fd68c37c557547706b11551db82820b1e5aae209a8be2a977d9f6fc9a62a4c09920ceb25216168deab06d581933335d0053c9dba8d007f496170e1105fec22371b9f3480534e0c146df63e0a8683a5dab20e2db2596249710b4e4f6c459309948510a2f903eb3147c9fc1ab8890beb6208aa9e093505de47ff0c0d92ac45bf7e5707dce5425c1ea4bb22d1148481f79492b821c16cf5631abbb00ad9ac3975c6d3234a64170afef4ab7771965aecc85ebc9cc9fa29d2ce5b6a3ac8b268888cf40483666294742d5e9562b912d1cce381a428899b43fa42ed1cf3cb73d55a1b384cd19da22b620f643b55e0d1d41c1f42bea36cd043b8b3b5b64ad382c139907f3caf00290a0b9e77344f9794acc0dfa3432ee5e109ebfbdd364253b344ab0b555ed9ff25fc73dfa63e85d508ae33f81d719e2c986f1172c50894789bc6b3aab59c3f2ee41c538ce7be2ae4b9410bfaa1328d51cf0a3a80bc3eeed446d7dbc25d70696cbd9b38797da86e4287de720b0ba7ea854c174c1d2cf45ed2d92b222c626dfb0316e518d254247b72e65d1da13c4087ad52ccec1c06fd4e4401cc2c65903ff85bd40ff29b3647bedc299e46af9609d7be6455ce1df242c83e546126be99732858cc8c06a609ee212cc39b3acf9ae058bf641de20b4c0c0921a9d94e41e72ff4dbe9a1476fda647cef2f2f4ba22be5792405747ef70ea0697f817834e0450dca8b48de568cbc2236eec2e2b989ae3bdee051186d236222d9704501a6c383bd368940702038cf38d4b77383a47a14ff1a505924984aa9727157ee9e4ff5e9e5b589cea25bdac2b46b4aeebd34bee6f1102597dd76a4dca2f6fecadf411fe81a0609b73451bafbcd840c9c6ef89db7f85273156bb5dfe71d0837e8a22a8b9d08830fb6bd801ab823c9e0760c5102319f0bb58027646243c5159bc2c27f54bcdb8507f090c8f08a0d3b58ca8561f7179e6daab54649739684971b11cca7eb34a6bcd0b25f8705e7fe6d70c7505c88c73411218dc25a5e9515ebc3c9094ab92692cd3e01c03c96b66edd1da62bc0e2e49f51b648df14522b9a7f569b689512855f2fed4b006373a276220fca7e4083ace1d7c4b52b9cb1f6f6eaf9575b6fbd8e21a24184c545cbb8c4dbec4211f52877ac46c1cd3ac31d55c304588ccd9edcb6f69cbc7bbb340c860f53533c0aad92b49d4285cd775611810d97fe1c285db3eb85f1393f936bedd92c4a8b9b8bbee46316ffe703a3202ee14e114751376a5dfc81f7786f894b6c0e7ce210d61c9a380d2b252b6ec83045235c9c65a729b7169e60bdffd1d3b45c106ea9cedcdebd20973a3d44123b21753f68e17220a647cf67810b1b45edcfb71c04c71ee993d7a3831f3bf8e80e6cb40a36d1369bf98cbef6b2373816a6a4ae731088c210e6aa8709ae401ffaeddc439404b2dee9c2916122dcfb35b63b6a4aa9da76a8f4e2083b2c5d0d9433092e65c67ab47660f13cd9f6c53aa440cbd1a6901813ae94821afa9dd6e1165f66c081c7c1e685c59053dc586c88207314aaad81c2a22377d87fcac2301a9220fab232acff7ee4cb60eaf2a07f289b5413f40243c7ec6ad0c5a1fbefba6642419cc6ce10a29c8f9d325f32a19990306733dbef67c5f594caf5a18f4d06d240ad07d3e4de8fd4c0af2602841db2a4e3cdca92f3099e978b22dbd89e07ae9645cd487890ff175d74ae2dfea53a9d43e47863e62d42c3757de119440fc7c9f410870bcdb6c4243cbfb1042f64bc162ee2b6782914d7c4174732fcfbbe4df267c76f8b08f87398ac5b84903b67629ea640b0c3ee6650df5d8d544bc9a90f8087a07c0fbf00cf30e588659ccd4cd1d92dcfe3ca1f065423eb7bd6cd79f41e17f6b8769b1a76bc7bdbdcb7ef4b319d5b14e2d69c0d86f094ef9cb18683487bba22c10f9776d647f1294d8c1ceaf519e22d65a2947e64b8cf0f49530bf487d47833ddc6f0d5eb092eb133b64073202d91fbeb0797588f92fc9ede91826ac6eee86b6d7b2a5121b26c1e725269d26875e9b35e0be10469f431d300cb5cb8c7215048726b23ec23f0918ca3a3708fc413f8e7c5e9393651cd3992f8f05d1251bc3a744787a892d76b640ac6b55b673081bf3263a9d267dc23b63502dc4b3c2c9fd1418dbae6bd4c617439ce70fa039a2f0be249ab13d729672d67893a41b0c2919fe2b87be2491ddf32418e33ac0b312a0aabcd9e4bb6db05964fdf2c4d40505c1dd215de407e194d255a8765537c60a655401d6f2b499d97454decc3626654efdd7b1fd0b2df919ba363c96f42f7a62566efd90c79d210b0be9a1e2f945807522786607ec0fa34df6d45703a8fe5fb5d0f1c74a9989766031cdd45c5c13b11070ea85b51d81910418972547ef56ec3236718ee7225d7d2f4649f965ad23494a8908be448ce13a1696316ae71b64f593649fb9c965f362ffbed0c6d79457c7f7e8a4b3962a00746f459b9203b4f9fb3fb5c7aeb8b5397faad60f8c5bc66dab437640fef6b7db7465c0876d428eecf59df44c50f585de9c6eb08ff6c9a49881b48b541bf8223b4c630c49205a728e6fb5fd5745b2c620f8bd144b0329777abc2fb2e2b22c95bf28aff324600e34ba1fc668af0889df76555ed646c9d846111ba631e2caf986813cd264390d28cfec9d8e3962e2bd3bf193060f930c80528ebf736ad176bd8bb7aa151a6470fbaece129e08ff76a3a8dc74e58cad91c3db484040343c7931fb41f43d1eef985351102d87c1bf17ee76f6f09b5211623eaf23dda7d46282875f8fc1fc41da22bb335d75e86d5f62e78b732dc7068bc79ba664e13d16a27c28d6c4a3f5ead20b2adfc65aa016a7542c0bb3f9a3393384ab296067eac56b9e605dc854a66cbe35b3f8ecf50adfab20bc06fd7bb783f194230e1a5f0ba17c720334471ea6877ac92dd2a0dac04207b3ae8c87571ffd3bd9252b98aa335d42cfc03bf496aefdc0b658e0ea83d723d81c4f5212826313445124c2f7841cda808bb7f5b43c6ca2722ed8787fb40c65557c7c36f918afa8dcccb143dc16b68c65eaa1e1cdce862b2776464105a1601d26aa5a79f868037a175634cfb4d3d37b2a5c5aab8a70473b3424e7faa252a59436126be6941a6892fcbbcf79b65e2b5f72bc231c6f0fabd18ea7576d29853415d2f34925809acce6e3bc1b00b4d29860d3664ef62fc1239c5d8f709a0519b22fdeec15b24c25d5c3bf2f673e90d7ca8b9c5d72ad9db7113b5e7a730215939e5c5353c1bddaf79aef6623e2d641377e129eefad9e411411e9eed8af8704adc3aa5b45d8f69746dd764d515d859a98c364f59ddeae00f79cba903e8e1e27d75ffa0bfb85f9bb9f6dbe8a1c7cc68c2efa1821cfd42bc77842ea8087df11b79479692b7610969122ecfc983cd271f9333f61804e9eb7835d24f9c9373f40b391140dd217b1c1da8ae2d22f51edc1fe345342d0524019a1a85b28da268befee7a3c8384b33cd100e9468e040c6af9164884875e2f99ed22677ea29f258bbb1744988d4230f814af761e3edd0ff9e52d9cf0058b907e01cf96b43056de6be91352db97d6760f2b6b154dd12e216ab8da454eefa80fe857a68a43c45b1280786b18998aa28bd3689e3909229e9d2997dfbc6800dedbb2507fd738741222563f4b29a4de75857b21cb091a9db1897f136941c46626841b9d998c31af81773024df3baf6ab921a991a8a430d03f3c68ef86119dcb996c594d4d610b2bf33e1469bb960ea538ddd6d2a77ffb347fa396fa70c236f5dc2eaa58b437aa67c5c60e734bba7647142fda260fa25a60d2ee62d7eae6ef57dd9252a5588988a3888731d845d6572c5f20a5529b04bba07affe882740b55bd0e3ba8f00d6d8bb9bcdd85eaad22add904da669205d20f5b6e506867d1cdd1fd77e311c5e236a245b52451ff878db916b0e5097769d311cc878aad1fbde7ce05f431219a9cb35081f6161b0c0b80da840113f57c720f1c40802a8c36d696770b47c5a74377490a98caf50b521d14d23af4280033eb4bbe1b312d220b12e4897845c47cabe2eea6782c2124842d1b70a2533c3667c26e4ff1dee9b5c1fbaac64bc82ccf4748bae08f4ab33e7d82246df11f5a2a3444e751714ed51456a13aa9ac95e67b18e6b869e90c2e2b9aa7346d913ab424419f91aef7b8234ba90c0f1f6be5f2dddb1dab5dea9f600d89af49e1fb52628b0d44c54713c0054ebe063fee79fb344c6dcbdeef3c285a11a017ed7480331ed13a13fa6924f58f4e7f1dec832d28a392e9ef2acbd892ad901cf9e6daa31428a4eb50c508d197a2e64f33dad08a69f0ffab1fc5fbecf3137a9c9af96a52b830022283e241558e610f31548f0839b49b0118e4f1b1bb650be6a37b6e24ba3c3fda57b99688e8a8c3db38ef0d1a5ecb7229d0caa07c14fa9d17365eed7b60ef55efe7c02fc0d49996d9ffca7b0b19b13b93ddf2", "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"}) [ 1823.002769][T11839] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 1823.010990][T11839] usb 5-1: config 0 has no interface number 0 [ 1823.017375][T11839] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1823.028808][T11839] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1823.040010][T11839] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb 15:40:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f0000000240)=@ethtool_eeprom={0x4b, 0x100000001}}) [ 1823.049214][T11839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:40:56 executing program 1: r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 15:40:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) [ 1823.336762][T11839] usb 5-1: config 0 descriptor?? [ 1823.383075][T11839] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1823.394757][T11839] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input272 [ 1823.580380][T11839] usb 5-1: USB disconnect, device number 6 [ 1823.592940][T11839] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1824.392389][T11839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1824.632344][T11839] usb 5-1: Using ep0 maxpacket: 8 [ 1824.752494][T11839] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 1824.760727][T11839] usb 5-1: config 0 has no interface number 0 [ 1824.767083][T11839] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1824.778088][T11839] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1824.789489][T11839] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1824.798706][T11839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.807873][T11839] usb 5-1: config 0 descriptor?? [ 1824.857332][T11839] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1824.869243][T11839] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input273 15:40:58 executing program 4: r0 = socket$inet(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, @remote, 0x0, 0x0, 'dh\x00'}, 0x2c) 15:40:58 executing program 5: pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f4534ff0000f3ff020000000000000000380200026a87406557d9e9dba1de9fa7351d528400000000000000180000408f48895905ac410000000000"], 0x3c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:40:58 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x4000000000006, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 15:40:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000180)={'veth0_to_hsr\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000001580)=0x1, 0x4) 15:40:58 executing program 1: r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 15:40:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) [ 1825.193814][T11839] usb 5-1: USB disconnect, device number 7 [ 1825.200261][T11839] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:40:58 executing program 3: unshare(0x20400) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x40046103, &(0x7f0000000540)={0x0, {0x2, 0x0, @broadcast}, {}, {0x2, 0x0, @broadcast}}) 15:40:58 executing program 5: pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f4534ff0000f3ff020000000000000000380200026a87406557d9e9dba1de9fa7351d528400000000000000180000408f48895905ac410000000000"], 0x3c) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 15:40:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 15:40:58 executing program 1: r0 = io_uring_setup(0xd, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 15:40:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x8}}}, 0x128}}, 0x0) 15:40:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x11, r0, 0x0) migrate_pages(0x0, 0x1ff, &(0x7f00000000c0), 0x0) 15:40:58 executing program 4: write(0xffffffffffffffff, &(0x7f0000000100)="1f0000000104ff00fd4354c0", 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) dup2(r3, r0) io_submit(r1, 0xf6ab2a9, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:40:58 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:40:58 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0xc980) 15:40:58 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x1000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) dup3(r1, r0, 0x0) 15:40:58 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendmmsg(r1, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 15:40:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x40000002, 0x0, 0x3}]}) 15:40:59 executing program 3: socket$kcm(0x2b, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000000)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000040)=@caif=@rfm={0x25, 0x1f, "35b0d04845eddb3bc5582e88086d0216"}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f000000cd00)={0x0, 0x0, 0x0}, 0x2000) 15:40:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) listen(r0, 0x10000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x20, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "d3fd8e9aa7da64"}]}}}}}}}}, 0x0) 15:40:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x40000002, 0x0, 0x3}]}) 15:40:59 executing program 4: write(0xffffffffffffffff, &(0x7f0000000100)="1f0000000104ff00fd4354c0", 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:40:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x34, 0x12, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6vti={{0xc, 0x1, 'ip6vti\x00'}, {0x4}}}]}, 0x34}}, 0x0) 15:40:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="d6c6e50c08f2", 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) 15:40:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x40000002, 0x0, 0x3}]}) 15:40:59 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendmmsg(r1, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 15:40:59 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendmmsg(r1, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 15:40:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x2, [{0x40000002, 0x0, 0x3}]}) 15:40:59 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x10004, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 15:40:59 executing program 4: write(0xffffffffffffffff, &(0x7f0000000100)="1f0000000104ff00fd4354c0", 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:41:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @loopback, 0x0, 0xa, [@remote, @broadcast, @multicast1, @rand_addr, @empty, @broadcast, @empty, @multicast2, @remote, @broadcast]}, 0x38) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000231000)={@multicast2, @loopback, @broadcast}, 0xc) 15:41:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001440)=[{0x0}], 0x1, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) socket(0x30002000000010, 0x2, 0x0) r2 = socket(0x30002000000010, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r3) setresgid(0x0, 0x0, r3) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 15:41:00 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r1, 0x0) 15:41:00 executing program 4: write(0xffffffffffffffff, &(0x7f0000000100)="1f0000000104ff00fd4354c0", 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:41:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000b67000), &(0x7f00000000c0)=0x4) 15:41:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001440)=[{0x0}], 0x1, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) socket(0x30002000000010, 0x2, 0x0) r2 = socket(0x30002000000010, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r3) setresgid(0x0, 0x0, r3) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 15:41:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f0000000000)) 15:41:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendmmsg(r1, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 15:41:00 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendmmsg(r1, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 15:41:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0xf4, 0x0, [0x277]}) 15:41:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001440)=[{0x0}], 0x1, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) socket(0x30002000000010, 0x2, 0x0) r2 = socket(0x30002000000010, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r3) setresgid(0x0, 0x0, r3) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 15:41:01 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000010a00)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x41}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x48) 15:41:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001440)=[{0x0}], 0x1, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) dup(0xffffffffffffffff) socket(0x30002000000010, 0x2, 0x0) r2 = socket(0x30002000000010, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r3) setresgid(0x0, 0x0, r3) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 15:41:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6a7358a2b4f8ef1e50beca090fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646c4dc5e64e024f75b77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 15:41:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000057c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000003a40)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xc, 0x4, [@broadcast, @multicast2]}]}}}], 0x20}}], 0x2, 0x0) 15:41:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x57d, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000001d00)=0x5, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x12}, 0x2000) 15:41:01 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="b00200002d001b0828bd09000000df2500000000", @ANYRES32, @ANYBLOB="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"], 0x2b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004044) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:41:01 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6a7358a2b4f8ef1e50beca090fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646c4dc5e64e024f75b77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 15:41:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffca, &(0x7f0000000080)={0x0, 0x41}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffd53, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000019007f5300fe01b2a4a280930a800000000000000000000039000900350002000000000019000500fe800010000000dc1338d544132000000083de448daa7227c43ab8220000064fab91d00000000060", 0x55}], 0x15b}, 0x0) r1 = socket(0x10, 0x200080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492805, 0x0) 15:41:01 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendmmsg(r1, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 15:41:01 executing program 1: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000014, &(0x7f0000000140)) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x4100000e, 0x0) 15:41:01 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendmmsg(r1, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 15:41:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x57d, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000001d00)=0x5, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x12}, 0x2000) 15:41:02 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6a7358a2b4f8ef1e50beca090fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646c4dc5e64e024f75b77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 15:41:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x57d, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000001d00)=0x5, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x12}, 0x2000) 15:41:02 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b7000000a5510700bfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001edff9fbd400200000000000406000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912461917adef6a7358a2b4f8ef1e50beca090fe275daf11efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaeba9d940a891b2a0cefc646c4dc5e64e024f75b77900000000000000"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 15:41:02 executing program 1: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000014, &(0x7f0000000140)) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x4100000e, 0x0) 15:41:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x57d, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000001d00)=0x5, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x12}, 0x2000) 15:41:02 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xd8, 0xd2, 0x31, 0x8, 0x110a, 0x1131, 0x5e0a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1b, 0x0, 0x1, 0x8f, 0x1b, 0xe6, 0x0, [], [{{0x9, 0x5, 0x5, 0x2}}]}}]}}]}}, 0x0) 15:41:02 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000080)={@local, @local, [], {@generic={0x8864, "42a703000000"}}}, 0x0) recvmmsg(r0, &(0x7f000000c5c0)=[{{&(0x7f0000006f00)=@ipx, 0x80, 0x0}}], 0x1, 0x22, 0x0) 15:41:02 executing program 1: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000014, &(0x7f0000000140)) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x4100000e, 0x0) 15:41:02 executing program 0: r0 = socket(0x200000000010, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) 15:41:02 executing program 1: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000014, &(0x7f0000000140)) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x4100000e, 0x0) 15:41:02 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "586d894d"}, 0x0, 0x0, @fd, 0x4}) 15:41:02 executing program 2: syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x73f4fdbe, 0x1) unshare(0x20400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 15:41:03 executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x48, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x220a, 0x4) [ 1829.952421][T11839] usb 4-1: new high-speed USB device number 79 using dummy_hcd 15:41:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 15:41:03 executing program 1: syz_usb_connect(0x0, 0x1cf, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006ff94610b4070a010201000000010902240001000000000904c00002a6db5d000905091e000000000009058f0200000000001fa01b6d21bb63259fab25683a4e7b575530cc5a7c11a25515e7441258e8422d1315c7a91c4ceaa7ad0093510bc7dfc55cf9acdfa55b015a64fba9af9cb0877281afef2051ae623e53a7f9f75963ac1f1482c0a4f60d87731226cf79b05ae07508a0b31677fdadb1b620a27c5358f8f3f596aa26cc1cfb919650d842ba5af102d587bfe42a3568f29ae6e0d56a7146e22d3899fdb32241b8bbf3c7603c1995a7b1f321d196f4e395b07a2edf51a24e625b8c29d26fd84c9b274ff3d302213813fcf585fa0f836968e047ca4ef3d64358a64d2229e16e8432d648c8fb9167188c685c48463c4f1f3425abe4cf45916f55d11fb6e9e0bbbdc7581b00e7b422c572ba0a5e2445f594dbfd0b78b57553c8247604b5033015c13c8ce7f7111efff5b068bcbdbabfbcdd36a75dd74315992bdf7028985051ba66d25ee353f21ec3196d3ba59acaff2cd5a5df53bed0c400c39bd18a3ea8a0bc6164c7d30787e8362214bc3a68314483c218eef026f3bdfe56c3fe5f40ef76e1c675721c6b02f1872d3378481eb1e5c382b5092acfbb3b8975a4b1c47f10985f10da61995b21fa0cb80616c083dc09000000"], 0x0) 15:41:03 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)) [ 1830.222383][T11839] usb 4-1: Using ep0 maxpacket: 8 15:41:03 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fstatfs(r0, &(0x7f0000000000)=""/229) [ 1830.342841][T11839] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 1830.351060][T11839] usb 4-1: config 0 has no interface number 0 [ 1830.357499][T11839] usb 4-1: config 0 interface 27 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1830.367419][T11839] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=5e.0a [ 1830.376645][T11839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.497499][T11839] usb 4-1: config 0 descriptor?? [ 1830.542472][T12032] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1830.556495][T11839] ti_usb_3410_5052 4-1:0.27: TI USB 3410 1 port adapter converter detected [ 1830.566355][T11839] usb 4-1: Direct firmware load for moxa/moxa-1131.fw failed with error -2 [ 1830.575316][T11839] usb 4-1: ti_download_firmware - firmware not found [ 1830.582471][T11839] ti_usb_3410_5052: probe of 4-1:0.27 failed with error -2 [ 1830.755959][T11839] usb 4-1: USB disconnect, device number 79 [ 1830.782391][T12032] usb 2-1: Using ep0 maxpacket: 16 [ 1830.902772][T12032] usb 2-1: config 0 has an invalid interface number: 192 but max is 0 [ 1830.911676][T12032] usb 2-1: config 0 has no interface number 0 [ 1830.918097][T12032] usb 2-1: config 0 interface 192 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 1830.928038][T12032] usb 2-1: config 0 interface 192 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1830.938135][T12032] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1830.947272][T12032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.956874][T12032] usb 2-1: config 0 descriptor?? [ 1830.994767][T12032] ums-alauda 2-1:0.192: USB Mass Storage device detected [ 1831.006338][T12032] scsi host1: usb-storage 2-1:0.192 [ 1831.195496][T12032] usb 2-1: USB disconnect, device number 127 [ 1831.542443][T11839] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1831.792275][T11839] usb 4-1: Using ep0 maxpacket: 8 [ 1831.912557][T11839] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 1831.920766][T11839] usb 4-1: config 0 has no interface number 0 [ 1831.927100][T11839] usb 4-1: config 0 interface 27 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1831.936948][T11839] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=5e.0a [ 1831.946204][T11839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.955386][T11839] usb 4-1: config 0 descriptor?? [ 1831.972385][T12032] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1831.995953][T11839] ti_usb_3410_5052 4-1:0.27: TI USB 3410 1 port adapter converter detected [ 1832.005727][T11839] usb 4-1: Direct firmware load for moxa/moxa-1131.fw failed with error -2 [ 1832.014718][T11839] usb 4-1: ti_download_firmware - firmware not found [ 1832.021824][T11839] ti_usb_3410_5052: probe of 4-1:0.27 failed with error -2 [ 1832.194233][T26420] usb 4-1: USB disconnect, device number 80 [ 1832.212325][T12032] usb 2-1: Using ep0 maxpacket: 16 [ 1832.332533][T12032] usb 2-1: config 0 has an invalid interface number: 192 but max is 0 [ 1832.340909][T12032] usb 2-1: config 0 has no interface number 0 [ 1832.347281][T12032] usb 2-1: config 0 interface 192 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 1832.357290][T12032] usb 2-1: config 0 interface 192 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1832.367561][T12032] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1832.376718][T12032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.386384][T12032] usb 2-1: config 0 descriptor?? [ 1832.424863][T12032] ums-alauda 2-1:0.192: USB Mass Storage device detected [ 1832.437039][T12032] scsi host1: usb-storage 2-1:0.192 15:41:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x6c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r2, &(0x7f0000002700)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/180, 0xb4}}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000d00)}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000000f00)}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/4096, 0x86c}], 0x4, &(0x7f0000000fc0)=""/35, 0x23}}, {{&(0x7f0000001000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001200)=[{&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000001080)=""/159, 0x9f}, {&(0x7f0000001140)=""/34, 0x22}, {&(0x7f0000001180)=""/19, 0x13}, {&(0x7f00000011c0)=""/9, 0x9}, {&(0x7f0000006980)=""/4096, 0x1000}], 0x6}}, {{&(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001300)=""/207, 0xcf}, {&(0x7f0000001400)=""/238, 0xee}, {&(0x7f0000001500)=""/64, 0x40}], 0x3}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000025c0)=""/81, 0x51}, {&(0x7f0000002640)=""/79, 0x4f}], 0x2}}], 0x6, 0x0, 0x0) 15:41:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x3}) 15:41:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x800011, r0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), 0x4) 15:41:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="529cd86bf100130381da754800be19cba8", 0x11) 15:41:05 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000840000000000000003"]) unshare(0x8000400) ppoll(&(0x7f0000000040)=[{}], 0x20000000000000f5, &(0x7f0000000200)={0x77359400}, &(0x7f00000001c0), 0x8) [ 1832.624085][T11839] usb 2-1: USB disconnect, device number 2 [ 1832.690271][T25881] sctp: [Deprecated]: syz-executor.2 (pid 25881) Use of int in max_burst socket option deprecated. [ 1832.690271][T25881] Use struct sctp_assoc_value instead [ 1832.780825][T25915] sctp: [Deprecated]: syz-executor.2 (pid 25915) Use of int in max_burst socket option deprecated. [ 1832.780825][T25915] Use struct sctp_assoc_value instead 15:41:05 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, 0x0, 0x0) 15:41:05 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xa7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000180)=@raw=[@map], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x70ad) 15:41:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="d800000018008100e00f80ecdb4cb904231d65ef0b007c06e87c55a1bc000900b8000699030000000500150006008178a80016000f000200e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d1d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adccb2604ba4c1dc831f9ad6edf815ffea8df634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) 15:41:06 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)) [ 1833.023936][T26001] device nr0 entered promiscuous mode 15:41:06 executing program 1: keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 15:41:06 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000840000000000000003"]) unshare(0x8000400) ppoll(&(0x7f0000000040)=[{}], 0x20000000000000f5, &(0x7f0000000200)={0x77359400}, &(0x7f00000001c0), 0x8) 15:41:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0xfffffffffffffffe) 15:41:06 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendfile(0xffffffffffffffff, r2, &(0x7f0000000200), 0x2008000fffffffe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$get_persistent(0x3, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$get_persistent(0x3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000003c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x0, r4}, {0x2, 0x1}], {}, [{0x8, 0x4}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/dlm-control\x00', 0x1a1200, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00', 0x1000) unshare(0x40000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) 15:41:06 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, 0x0, 0x0) [ 1833.394278][T26018] IPVS: ftp: loaded support on port[0] = 21 15:41:06 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000840000000000000003"]) unshare(0x8000400) ppoll(&(0x7f0000000040)=[{}], 0x20000000000000f5, &(0x7f0000000200)={0x77359400}, &(0x7f00000001c0), 0x8) 15:41:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0xfffffffffffffffe) 15:41:06 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, 0x0, 0x0) 15:41:06 executing program 1: syz_usb_connect(0x1, 0x214, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4, 0xd3, 0x65, 0x8, 0xcf3, 0x9375, 0x1a64, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x68, 0x60, 0x12, 0x0, [], [{{0x9, 0x5, 0x3, 0x1a}}]}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1834.091666][T12032] usb 2-1: new low-speed USB device number 3 using dummy_hcd 15:41:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x4, 0xfd90, &(0x7f00000000c0)=""/195}, 0x23) 15:41:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0xfffffffffffffffe) 15:41:07 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000840000000000000003"]) unshare(0x8000400) ppoll(&(0x7f0000000040)=[{}], 0x20000000000000f5, &(0x7f0000000200)={0x77359400}, &(0x7f00000001c0), 0x8) 15:41:07 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r1 = socket$kcm(0x11, 0x8000000002, 0x300) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001d80)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, 0x0, 0x0) [ 1834.139080][T26060] IPVS: ftp: loaded support on port[0] = 21 15:41:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f00002a5000/0x2000)=nil, 0x2000) mbind(&(0x7f000004a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000099c000/0x3000)=nil) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x8002, &(0x7f0000c28000)=0x800003f, 0xf1, 0x0) 15:41:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0xfffffffffffffffe) [ 1834.534184][T12032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1834.544336][T12032] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.64 [ 1834.553565][T12032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.633135][T12032] usb 2-1: config 0 descriptor?? [ 1834.922929][T12032] ath6kl: Failed to submit usb control message: -71 [ 1834.929646][T12032] ath6kl: unable to send the bmi data to the device: -71 [ 1834.936812][T12032] ath6kl: Unable to send get target info: -71 [ 1834.946787][T12032] ath6kl: Failed to init ath6kl core: -71 [ 1834.955911][T12032] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1834.979797][T12032] usb 2-1: USB disconnect, device number 3 15:41:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet6(0xa, 0x803, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@rand_addr="a6ac30405bd92f9bea3c5597afc948ee", 0x0, r2}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000005c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, r2}) r3 = open(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@local}}, 0x0) getegid() r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 15:41:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000040)='security.evm\x00', 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 15:41:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$inet6(0xa, 0x2, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x3c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:41:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 15:41:08 executing program 5: syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@hopopts={0x2f}], "150088beffff0000"}}}}}}}, 0x0) [ 1835.222697][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1835.228956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1835.235397][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1835.241578][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1835.542844][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1835.682584][T12032] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 1836.052553][T12032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1836.062627][T12032] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.64 [ 1836.071760][T12032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.081974][T12032] usb 2-1: config 0 descriptor?? 15:41:09 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @multicast1}}) 15:41:09 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x40000000000008, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="100000000100"/16, 0x10}]) 15:41:09 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a00401000000000000000000000000800120000000100000000000000000006051e7dabc56b523009000000000000e000000500000000060000000000020000000000000000f9ff0c20051d63da4f030001800000080002c70fee4394ffbbf000000000000000030005000000000002001d632b91c52001000000080000003835efd766e5ff690ed9a0fa26c5c50000004b0f1e397ab23b08ecca7703f82a53e8e30d4c91eb1f1bd69e6007a93fb65cc82f5cdaeb9ca3a7647e562f86cb382451f8f8005926ef97797d2fc2a2f4c15855213680ba36b205944da7b42f307d66bff312d8f7f0eb1ab4c1e4678aeb32a0"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020700000200000000000000000000001f9e61bd01c4609f5c204392553faa8f3040127683332f5eddb2025f3e70885d6a259406bc58845711b26acd041e4dccd4477c9d52c9b479ca95e4f655d6cbdbdd8b1e1220b0cf293009cb9c9ef21340440cac1eadb93def086f7bc8643de0993e1e81763a490220d191c7c81c76bc004246b73c5b0e81be0058cb01e5e98fcd68e9ade41ffecabea82f21eb3f8de759967b2bbd1565162c"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:41:09 executing program 1: syz_usb_connect(0x1, 0x214, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4, 0xd3, 0x65, 0x8, 0xcf3, 0x9375, 0x1a64, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x68, 0x60, 0x12, 0x0, [], [{{0x9, 0x5, 0x3, 0x1a}}]}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:41:09 executing program 2: r0 = eventfd2(0x3, 0x800) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000240)=""/231, 0xe7}], 0x2) 15:41:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 1836.401635][T12032] ath6kl: Failed to submit usb control message: -71 [ 1836.408505][T12032] ath6kl: unable to send the bmi data to the device: -71 [ 1836.415671][T12032] ath6kl: Unable to send get target info: -71 [ 1836.514189][T12032] ath6kl: Failed to init ath6kl core: -71 [ 1836.570453][T12032] ath6kl_usb: probe of 2-1:0.0 failed with error -71 15:41:09 executing program 2: r0 = eventfd2(0x3, 0x800) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000240)=""/231, 0xe7}], 0x2) 15:41:09 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/526], 0x12e) write$UHID_INPUT2(r0, &(0x7f0000000180), 0x6) 15:41:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) [ 1836.634595][T12032] usb 2-1: USB disconnect, device number 4 [ 1836.773905][T26420] hid-generic 0000:0000:0000.006F: ignoring exceeding usage max 15:41:09 executing program 5: syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f00000000c0)={0x7}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) [ 1836.840926][T26420] hid-generic 0000:0000:0000.006F: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1836.899612][T27030] debugfs: File '27029' in directory 'proc' already present! [ 1836.929997][T26420] hid-generic 0000:0000:0000.0070: ignoring exceeding usage max 15:41:10 executing program 2: r0 = eventfd2(0x3, 0x800) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000240)=""/231, 0xe7}], 0x2) [ 1836.995685][T26420] hid-generic 0000:0000:0000.0070: hidraw0: HID v0.00 Device [syz1] on sz1 [ 1837.082506][T12032] usb 2-1: new low-speed USB device number 5 using dummy_hcd 15:41:10 executing program 2: r0 = eventfd2(0x3, 0x800) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000240)=""/231, 0xe7}], 0x2) 15:41:10 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x3) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x81, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x32, 0x250) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) [ 1837.442910][T12032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1837.453045][T12032] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.64 [ 1837.462176][T12032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.476223][T12032] usb 2-1: config 0 descriptor?? [ 1837.732697][T12032] ath6kl: Failed to submit usb control message: -71 [ 1837.739377][T12032] ath6kl: unable to send the bmi data to the device: -71 [ 1837.746660][T12032] ath6kl: Unable to send get target info: -71 [ 1837.753024][T12032] ath6kl: Failed to init ath6kl core: -71 [ 1837.759957][T12032] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1837.771535][T12032] usb 2-1: USB disconnect, device number 5 15:41:11 executing program 1: syz_usb_connect(0x1, 0x214, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4, 0xd3, 0x65, 0x8, 0xcf3, 0x9375, 0x1a64, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x68, 0x60, 0x12, 0x0, [], [{{0x9, 0x5, 0x3, 0x1a}}]}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 15:41:11 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000000109025c0001010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000919810300000000000904010000020d00000904010102020d000009058202000000000009050302000000000034ecff83926998708db928169ee2d953a71ac2c135809e87afd00dd2c81c3e736956265eabdb85e3dcc4b381aacfe238e503d52f0da0fd60d746e9ebcf4f299b8d44bc0a4acd42ea39ce94fdbf1f33bf5fe871f52e717f494d767d7034b069ed5ffb8c8498bd60287038db6d41dc470fd0af86037f28f5c1ac1b42877979951b2a190d2635370db307058922dd557806ff039d2fdb6f8c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0xac, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 15:41:11 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5) 15:41:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$sock_timeval(r1, 0x1, 0x9, &(0x7f0000000100)={0x0, 0x2710}, 0x10) 15:41:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000a}}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000000000578700"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02120300020000000a000097c3d344734e3403e54581675821c250d1744de9cc00026a0ddc50c4b5b97076fe1fc60b2b689ad658920eac98068862dd32819fdbbea6d788117754fbd287f9e9b78bf8a9690a3c0b23a322b9506673be785195031aa071080000000000000010db9a9dddf7580e56d000"/134], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 15:41:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080)=0x2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) 15:41:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f00000001c0)="2600000022004701050007008980e8ff06006d20002b1f486517f6c55d185fc812323000c0e9", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0xfff9) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:41:11 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0xc0, 0x0, [], [{}, {0xffffffff}], [[], [], [], [], []]}) 15:41:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2c03", 0x2}], 0x1}, 0xc100) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0x582}], 0x1}, 0x0) 15:41:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000002100000127bd7000ffdbdf2502341408030000000f0000000800012008000f000000000008000200e000000108000200a91414aa"], 0x1}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f00000014c0)=ANY=[@ANYBLOB="c40f0000000000010000000000000000b40f00b715d24c8b50c4320ef3b64471ff00b9009c05bfdf91a5c2c439ed8b11fe06a2e52ac611123e7a83c6"], 0x1}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 15:41:11 executing program 2: io_setup(0x11, &(0x7f0000000240)=0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x145002) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 1838.582424][T12155] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 1838.652474][T12032] usb 1-1: new high-speed USB device number 35 using dummy_hcd 15:41:11 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0xc0, 0x0, [], [{}, {0xffffffff}], [[], [], [], [], []]}) [ 1838.942796][T12155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1838.953254][T12155] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.64 [ 1838.962523][T12155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.983696][T12155] usb 2-1: config 0 descriptor?? [ 1839.013190][T12032] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1839.021338][T12032] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1839.030042][T12032] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1839.039254][T12032] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1839.052306][T12032] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1839.062101][T12032] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1839.071976][T12032] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1839.081109][T12032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.134498][T12032] cdc_ncm 1-1:1.0: skipping garbage [ 1839.252489][T12155] ath6kl: Failed to submit usb control message: -71 [ 1839.259217][T12155] ath6kl: unable to send the bmi data to the device: -71 [ 1839.266855][T12155] ath6kl: Unable to send get target info: -71 [ 1839.273435][T12155] ath6kl: Failed to init ath6kl core: -71 [ 1839.280433][T12155] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1839.291883][T12155] usb 2-1: USB disconnect, device number 6 15:41:12 executing program 1: syz_usb_connect(0x1, 0x214, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4, 0xd3, 0x65, 0x8, 0xcf3, 0x9375, 0x1a64, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x68, 0x60, 0x12, 0x0, [], [{{0x9, 0x5, 0x3, 0x1a}}]}}]}}]}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1840.042375][T12155] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 1840.232710][T12032] cdc_ncm 1-1:1.0: bind() failure [ 1840.253452][T12032] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1840.274067][T12032] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1840.292876][T12032] usbtest: probe of 1-1:1.1 failed with error -71 [ 1840.303408][T12032] usb 1-1: USB disconnect, device number 35 [ 1840.412586][T12155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1840.422662][T12155] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.64 [ 1840.431774][T12155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.441516][T12155] usb 2-1: config 0 descriptor?? [ 1840.712502][T12155] ath6kl: Failed to submit usb control message: -71 [ 1840.719300][T12155] ath6kl: unable to send the bmi data to the device: -71 [ 1840.726693][T12155] ath6kl: Unable to send get target info: -71 [ 1840.735873][T12155] ath6kl: Failed to init ath6kl core: -71 [ 1840.743239][T12155] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1840.754600][T12155] usb 2-1: USB disconnect, device number 7 [ 1841.082359][T11839] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1841.452542][T11839] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1841.460637][T11839] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1841.469918][T11839] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1841.479087][T11839] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1841.492053][T11839] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1841.501927][T11839] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1841.511696][T11839] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1841.520836][T11839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.564176][T11839] cdc_ncm 1-1:1.0: skipping garbage 15:41:14 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0xac, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 15:41:14 executing program 4: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000001540)=0x7f05, 0x20, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mbind(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x1, 0x0, 0x0, 0x0) 15:41:14 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0xc0, 0x0, [], [{}, {0xffffffff}], [[], [], [], [], []]}) 15:41:14 executing program 2: io_setup(0x11, &(0x7f0000000240)=0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x145002) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 15:41:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x0, "046653db743699511318088732941da57988d24719ea43d970d9f1da0a19e4d2"}) 15:41:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000000080)="00000002", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="240000000c0007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x256}], 0x1}, 0x0) [ 1841.793572][T11839] cdc_ncm 1-1:1.0: bind() failure [ 1841.804592][T11839] cdc_ncm 1-1:1.1: bind() failure [ 1841.836568][T27723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:41:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)) [ 1841.878364][T11839] usb 1-1: USB disconnect, device number 36 15:41:15 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0xc0, 0x0, [], [{}, {0xffffffff}], [[], [], [], [], []]}) 15:41:15 executing program 2: io_setup(0x11, &(0x7f0000000240)=0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x145002) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 15:41:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4ce]}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x629}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000200000007000000000005"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:41:15 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff49, 0x0, 0x0, 0xfffffee8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1842.274560][T11839] usb 1-1: new high-speed USB device number 37 using dummy_hcd 15:41:15 executing program 2: io_setup(0x11, &(0x7f0000000240)=0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x145002) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 1842.497969][T27956] kvm [27938]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x104d00000000f [ 1842.559958][T27956] kvm [27938]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x104d00000000f [ 1842.603638][T27956] kvm [27938]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x104d00000000f [ 1842.695184][T11839] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1842.703690][T11839] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1842.711851][T11839] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1842.721009][T11839] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1842.734078][T11839] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1842.743972][T11839] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1842.753896][T11839] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1842.763057][T11839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.816040][T11839] cdc_ncm 1-1:1.0: skipping garbage [ 1843.892552][T11839] cdc_ncm 1-1:1.0: bind() failure [ 1843.912756][T11839] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1843.932580][T11839] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1843.952674][T11839] usbtest: probe of 1-1:1.1 failed with error -71 [ 1843.964409][T11839] usb 1-1: USB disconnect, device number 37 15:41:17 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0xac, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 15:41:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='clear_refs\x00\xb0I\v8e\x84V\x1f\x13.\xd2e\xc6\xd1\x00x\xe6\fK\xa3/\xd7\xb9Iq\\\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\xac\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=/\x89\x06r\b\'Ho\xf7\x88B7e\bU\'\x83\xf0\x9c\xbf\xdc7\xf8;\xea}\xa8\x9fvs\xc4\xd36\t\x1eu7L\xe0\xb0~?\xdb\xf9t]5\x0e\xe0\xad\xa2_\xadL\xe6\xc4\xed\\\x85:5\b\x9b\xa0.h|\x84\x05\x00\xdd5\x0e\xb1\x18\x06\xbf\xe2\xd61\xc1\xa0-\x18\x12\xba\xa2\xf1\xc2D\x92\xd4\xc5\xf7$\x18\x8a\b/\x8e\xa2\xf07\xa9\x05x\xa91\xd6\x9f\x15\x18vX\x9b\xa4\x95\x83\xd0\xee\x92\xb1\xcb&y\xa7F\xb2\x8fsp{\xb64\xd4!\xf5d_\xea ;\x11\a\xd0\x18\xa8\xba\x1f\x95\xa5\xa6{f\xb2\xd2\x9f') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') sendfile(r0, r1, 0x0, 0x3) 15:41:17 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 15:41:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) 15:41:17 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/148, &(0x7f00000000c0)=0x94) 15:41:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) [ 1844.470636][T28165] IPVS: length: 148 != 8 15:41:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 15:41:17 executing program 1: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001985680c1ba3a20400ff7e280000005e00ffffba162441caf0da3b40c925234476d0b80ca0aa1c0009b3ebea8653b1cc7e6397", 0x4c}], 0x1}, 0x0) 15:41:17 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 15:41:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) [ 1844.832434][T11839] usb 1-1: new high-speed USB device number 38 using dummy_hcd 15:41:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0x18, 0x1, [@typed={0x14, 0x20000019, @ipv6=@mcast1}]}]}, 0x30}}, 0x0) 15:41:17 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 1845.026653][T28592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1845.352536][T11839] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1845.360699][T11839] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1845.369264][T11839] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1845.378423][T11839] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1845.391564][T11839] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1845.401462][T11839] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1845.411219][T11839] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1845.420354][T11839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.464634][T11839] cdc_ncm 1-1:1.0: skipping garbage [ 1846.542874][T11839] cdc_ncm 1-1:1.0: bind() failure [ 1846.563745][T11839] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1846.582954][T11839] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1846.603840][T11839] usbtest: probe of 1-1:1.1 failed with error -71 [ 1846.613934][T11839] usb 1-1: USB disconnect, device number 38 15:41:20 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0xac, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 15:41:20 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 15:41:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) 15:41:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 15:41:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') lseek(r0, 0x4, 0x0) 15:41:20 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 15:41:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x4, 0x400000}}, 0x20) 15:41:20 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 15:41:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) 15:41:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000068fe8)="ff0204000000000100000000000000000000000000000205", 0x18) setsockopt$inet6_buf(r2, 0x29, 0x1000000000000037, 0x0, 0x0) 15:41:20 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x40, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/17, 0x1000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 15:41:20 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) [ 1847.733380][T11839] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1848.092916][T11839] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1848.101014][T11839] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1848.109490][T11839] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1848.118624][T11839] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1848.131681][T11839] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1848.141678][T11839] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1848.151668][T11839] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1848.160889][T11839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.204686][T11839] cdc_ncm 1-1:1.0: skipping garbage [ 1849.272661][T11839] cdc_ncm 1-1:1.0: bind() failure [ 1849.292766][T11839] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1849.312578][T11839] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1849.332715][T11839] usbtest: probe of 1-1:1.1 failed with error -71 [ 1849.343312][T11839] usb 1-1: USB disconnect, device number 39 15:41:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000000c0)={0x1, 0x8, [0x0, 0x0]}) 15:41:22 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='maps\x00') pread64(r0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6) 15:41:22 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000a060501ff0080fffd090000ab0005610c00010006"], 0x19}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x10005, 0x0) 15:41:22 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc6, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0xac, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240), 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 15:41:22 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1100000052000501000000366ab1388c1a20f153ce0010deed62ee19776b1d9ada6676c7517f97b2d2add33be3693e6a4c651514fd9a9c7c4b9d5f8e0f56e057a8cbb9cd3532f039298f550000"], 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0) 15:41:23 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1a9e, 0x802) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8010550e, 0x0) 15:41:23 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xe9, 0x23, 0x1, 0x8, 0x1a0a, 0x103, 0x437d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x60, 0x0, 0x1, 0x60, 0x3f, 0x69, 0x0, [], [{{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) [ 1849.921649][T29189] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1849.930125][T29189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 15:41:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc) 15:41:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x0, @broadcast}}) 15:41:23 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0x0, 0x6, {0x7, 0x1f, 0x7, 0x200, 0x6, 0x7, 0x0, 0x7}}, 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, 0x0, &(0x7f00000008c0)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1850.103433][T12155] usb 5-1: new high-speed USB device number 8 using dummy_hcd 15:41:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x0, @broadcast}}) [ 1850.322879][T12032] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1850.343018][T12155] usb 5-1: Using ep0 maxpacket: 8 15:41:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x1, 0x0) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) 15:41:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x0, @broadcast}}) [ 1850.462750][T12155] usb 5-1: config 0 has an invalid interface number: 198 but max is 0 [ 1850.471142][T12155] usb 5-1: config 0 has no interface number 0 [ 1850.477514][T12155] usb 5-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 1850.486970][T12155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:41:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000760000007600bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f535b546"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1850.562374][T12032] usb 2-1: Using ep0 maxpacket: 8 [ 1850.603565][T12155] usb 5-1: config 0 descriptor?? [ 1850.648183][T12155] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 1850.684237][T12032] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 15:41:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x19) sendmmsg$inet(r0, &(0x7f0000004000)=[{{&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840), 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) [ 1850.692908][T12032] usb 2-1: config 0 has no interface number 0 [ 1850.853154][T12032] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.7d [ 1850.862980][T12032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.871059][T12032] usb 2-1: Product: syz [ 1850.875515][T12032] usb 2-1: Manufacturer: syz [ 1850.880165][T12032] usb 2-1: SerialNumber: syz [ 1850.886333][T12032] usb 2-1: config 0 descriptor?? [ 1850.902634][T26420] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1851.126130][T11839] usb 2-1: USB disconnect, device number 8 [ 1851.142358][T26420] usb 6-1: Using ep0 maxpacket: 8 [ 1851.262663][T26420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.273957][T26420] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1851.287024][T26420] usb 6-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 1851.296214][T26420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.306329][T26420] usb 6-1: config 0 descriptor?? [ 1851.783887][T26420] hid (null): invalid report_size 48640 [ 1851.791735][T26420] hid (null): usage index exceeded [ 1851.797094][T26420] hid (null): unknown global tag 0xd [ 1851.802511][T26420] hid (null): unknown global tag 0xc [ 1851.807827][T26420] hid (null): usage index exceeded [ 1851.813071][T26420] hid (null): global environment stack underflow [ 1851.823498][T26420] hid-generic 0003:1E5E:0313.0071: invalid report_size 48640 [ 1851.831049][T26420] hid-generic 0003:1E5E:0313.0071: item 0 2 1 7 parsing failed [ 1851.839296][T26420] hid-generic: probe of 0003:1E5E:0313.0071 failed with error -22 [ 1851.913292][T12032] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1851.988000][T26420] usb 6-1: USB disconnect, device number 127 [ 1852.152331][T12032] usb 2-1: Using ep0 maxpacket: 8 [ 1852.272573][T12032] usb 2-1: config 0 has an invalid interface number: 96 but max is 0 [ 1852.280799][T12032] usb 2-1: config 0 has no interface number 0 [ 1852.453031][T12032] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.7d [ 1852.462552][T12032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.470639][T12032] usb 2-1: Product: syz [ 1852.475032][T12032] usb 2-1: Manufacturer: syz [ 1852.479704][T12032] usb 2-1: SerialNumber: syz [ 1852.486166][T12032] usb 2-1: config 0 descriptor?? [ 1852.724517][T11839] usb 2-1: USB disconnect, device number 9 [ 1852.762529][T26420] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1853.002635][T26420] usb 6-1: Using ep0 maxpacket: 8 [ 1853.123384][T26420] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.134584][T26420] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1853.147576][T26420] usb 6-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 1853.156765][T26420] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.166344][T26420] usb 6-1: config 0 descriptor?? [ 1853.212869][T12155] gspca_sonixj: reg_w1 err -71 [ 1853.218020][T12155] sonixj: probe of 5-1:0.198 failed with error -71 [ 1853.228370][T12155] usb 5-1: USB disconnect, device number 8 [ 1853.522775][T26420] usbhid 6-1:0.0: can't add hid device: -71 [ 1853.528992][T26420] usbhid: probe of 6-1:0.0 failed with error -71 [ 1853.538221][T26420] usb 6-1: USB disconnect, device number 2 [ 1853.982606][T12155] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1854.222351][T12155] usb 5-1: Using ep0 maxpacket: 8 [ 1854.342557][T12155] usb 5-1: config 0 has an invalid interface number: 198 but max is 0 [ 1854.350792][T12155] usb 5-1: config 0 has no interface number 0 [ 1854.357143][T12155] usb 5-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 1854.366301][T12155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.375829][T12155] usb 5-1: config 0 descriptor?? [ 1854.416841][T12155] gspca_main: sonixj-2.14.0 probing 0471:0330 15:41:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rseq(0x0, 0x0, 0x1, 0x0) 15:41:27 executing program 2: clock_gettime(0xffffffffffffffff, 0x0) 15:41:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x0, @broadcast}}) 15:41:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x19) sendmmsg$inet(r0, &(0x7f0000004000)=[{{&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840), 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) 15:41:27 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d7fc070863071510ccd20000000109022d0001000000400904d20003ff8f550009058f13020000000009056e0f000000800009050d03ffffec000046b8d1a6a2565b2115ffd55127f7c7799f1e3aa54389c3a57e02a7deabe1406242868a7d7aca7428cf30791a905304aead47bbb673c86b2dd5a34e40be86cd5a7f90ad0886a7edddfe036a1c75e592c8cacc"], 0x0) 15:41:27 executing program 5: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x2972, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) [ 1854.676526][T12155] gspca_sonixj: reg_r err -71 [ 1854.681463][T12155] sonixj: probe of 5-1:0.198 failed with error -71 [ 1854.739279][T12155] usb 5-1: USB disconnect, device number 9 15:41:27 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e6526808720c1100f4320000000109021b0001000000000904000001d1f00000070507000000000000"], 0x0) 15:41:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x19) sendmmsg$inet(r0, &(0x7f0000004000)=[{{&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840), 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) 15:41:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0x12, 0x0, 0x0, 0x0, 0x0, 0xd210, 0x40}}) 15:41:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000002c0)={r6}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000002c0)={r6}) 15:41:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x19) sendmmsg$inet(r0, &(0x7f0000004000)=[{{&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f0000000840), 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x2, 0x0) [ 1854.994791][T11839] usb 2-1: new high-speed USB device number 10 using dummy_hcd 15:41:28 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0x0, 0x100000001, 0x800000000004, {0x1, @raw_data="2e326ad4d6de1c73c5ff6859c54bba23e7abe3c83d4e61fd399ad27fbfc521dfab96f615bd233fc9b7ed5043943f226af00bf1841f47a75652ebe91ca752f436589dafbc49b3a932492a954514195ab5d090d3615e4cf370bf2a99b3b1f489d6217f08e4844ebcf630fa9f029fe199c93fcacb80d868b5edc8a7d088727af50ba14bd85f85fe6289b211f7078aeaedd88327c0a649cb70a0588e09f70b0309740a6e427c2bbfc4b432f369ce300a26ce45e64dc63a2e002211c5d1dacc87917e8c19ac392b51504d"}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000006c0)={0x1, @sliced={0x0, [0x0, 0x40]}}) 15:41:28 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000)=0x3, 0x8, 0x0, 0x0, 0x0, 0x0) [ 1855.215630][T29941] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1855.233022][T29940] irq bypass consumer (token 00000000b0aa37a0) registration fails: -16 [ 1855.243528][T11839] usb 2-1: Using ep0 maxpacket: 8 15:41:28 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x3cc) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0103009f103666805ca1bb43d19afdcdb3c900"/30]) r7 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00\x00\xf2\xff\xff\xff\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 1855.274140][T26420] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1855.362920][T11839] usb 2-1: config 0 has an invalid interface number: 210 but max is 0 [ 1855.371279][T11839] usb 2-1: config 0 has no interface number 0 [ 1855.377593][T11839] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1855.388843][T11839] usb 2-1: config 0 interface 210 altsetting 0 has an invalid endpoint with address 0x6E, skipping [ 1855.399724][T11839] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0xD has an invalid bInterval 236, changing to 11 [ 1855.411272][T11839] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0xD has invalid maxpacket 2047, setting to 1024 [ 1855.422589][T11839] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=d2.cc [ 1855.431728][T11839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:41:28 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) setsockopt$inet6_group_source_req(r0, 0x29, 0x4a, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x1c, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x20000048) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @rand_addr=0x9}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x76, &(0x7f0000000000)={r5}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r8}, 0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000734c62db239c48d49286c0a2606c29904e6a8be7e184c3c5f6e0c4d0db6a735c365f63a665a42b8971d122ad5c3e61d30c6d77552a2d8bb556ce719fb7d4999e50f2a0cca96ff5bb5ec39b4620a083a2643ad299a1e72d209a4743da32ce60202f31c75d49bc42cee52d6c9169c611f1b1eccc8165cfbd2c5498da647ec7c0819ee71800015cd2c0e15080fe80a78323122d740d57c088745483d92c8add53b547b22539dfd26beb819cc447d7c8ede62c0bdefd753ebf5de86b75402f857c5b7e7c306f2fc53b1143dcf80a3890a3928a6d260931e4311278ba9723441f22cd3a2f89791d1b151d2be05ee8bdd52ef20020a07c7a7d0e9d60b5b2a7134fb05cf2d6b62791940f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r11}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000180)={r8, 0x7, 0x7f, 0x3ae6, 0x7, 0x7f, 0x1, 0x6, {r11, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x40000, 0x3, 0x0, 0x4, 0x80}}, &(0x7f0000000040)=0xb0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) r12 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r12, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 15:41:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000001c0)={[], 0x0, 0x0, 0x8c}) [ 1855.552746][T26420] usb 1-1: Using ep0 maxpacket: 8 [ 1855.668712][T11839] usb 2-1: config 0 descriptor?? [ 1855.705021][T26420] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.715418][T26420] usb 1-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=32.f4 [ 1855.718907][T11839] snd-usb-audio: probe of 2-1:0.210 failed with error -2 [ 1855.724735][T26420] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.809785][T26420] usb 1-1: config 0 descriptor?? [ 1855.918609][T26420] usb 2-1: USB disconnect, device number 10 [ 1856.068246][T11839] usb 1-1: USB disconnect, device number 40 [ 1856.702315][T11839] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1856.912444][T14387] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1856.952901][T11839] usb 2-1: Using ep0 maxpacket: 8 [ 1857.072668][T11839] usb 2-1: config 0 has an invalid interface number: 210 but max is 0 [ 1857.081065][T11839] usb 2-1: config 0 has no interface number 0 [ 1857.087326][T11839] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1857.098485][T11839] usb 2-1: config 0 interface 210 altsetting 0 has an invalid endpoint with address 0x6E, skipping [ 1857.109507][T11839] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0xD has an invalid bInterval 236, changing to 11 [ 1857.120973][T11839] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0xD has invalid maxpacket 2047, setting to 1024 [ 1857.132427][T11839] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=d2.cc [ 1857.141544][T11839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.151467][T11839] usb 2-1: config 0 descriptor?? [ 1857.192618][T14387] usb 1-1: Using ep0 maxpacket: 8 [ 1857.204430][T11839] snd-usb-audio: probe of 2-1:0.210 failed with error -2 [ 1857.312617][T14387] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.323133][T14387] usb 1-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=32.f4 [ 1857.332323][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.341681][T14387] usb 1-1: config 0 descriptor?? [ 1857.398787][T26420] usb 2-1: USB disconnect, device number 11 [ 1857.584292][T12155] usb 1-1: USB disconnect, device number 41 15:41:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000001c0)={[], 0x0, 0x0, 0x8c}) 15:41:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) [ 1857.766672][T31659] Bluetooth: hci0: Frame reassembly failed (-84) 15:41:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='(),vboxnet0\x00') r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000200)=0x200) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 15:41:30 executing program 5: unshare(0x600) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0), 0xffffffffffffffc3) 15:41:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffe73) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f3a567f30f2110f30f08d96900bad00466ed3e0f2291baf80c66b84845608866efbafc0ced3e36360fa7c03636d070630fc71b", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:41:30 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0xffffe27}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 15:41:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000001c0)={[], 0x0, 0x0, 0x8c}) 15:41:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x80000000000003) 15:41:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000001c0)={[], 0x0, 0x0, 0x8c}) 15:41:31 executing program 0: r0 = userfaultfd(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xc0000010}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 15:41:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0x40045566, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d8fad55886f0935f53483bf9c234bc5758782dd5fcb75865583023e6e4974ff3"}}) 15:41:31 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = dup(r0) read(r1, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7, 0x6, 0x0, 0x300effd}}, 0x20) 15:41:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)) dup(r6) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1859.782380][T14387] Bluetooth: hci0: command 0x1003 tx timeout [ 1859.788602][ T5521] Bluetooth: hci0: sending frame failed (-49) [ 1861.871892][T12155] Bluetooth: hci0: command 0x1001 tx timeout [ 1861.878153][ T5521] Bluetooth: hci0: sending frame failed (-49) [ 1863.942395][T14387] Bluetooth: hci0: command 0x1009 tx timeout 15:41:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$rfkill(r1, &(0x7f0000000000), 0xff2d) read$alg(r1, &(0x7f0000001880)=""/250, 0xfa) 15:41:41 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x1, 0x200000000000009}, 0x2c) 15:41:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x80000000000003) 15:41:41 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x1e, &(0x7f0000000400), 0x15) 15:41:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0xfffffffffffffffe) 15:41:41 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @remote}, "040088beffff0800"}}}}}, 0x0) 15:41:41 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x1, 0x200000000000009}, 0x2c) 15:41:41 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x35, 0x2c, 0x7b, 0x40, 0x421, 0x223, 0xc608, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd7, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@generic]}}]}}]}}, 0x0) 15:41:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007166710048000200"/92], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x34, 0x28, 0x701, 0x0, 0x0, {0x0, r4, {0x6}}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x24, 0x29, 0x701, 0x0, 0x0, {0x0, r4, {0x6}}}, 0x24}}, 0x0) 15:41:41 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f0000000040)) 15:41:41 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x1, 0x200000000000009}, 0x2c) 15:41:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x80000000000003) 15:41:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$rfkill(r1, &(0x7f0000000000), 0xff2d) read$alg(r1, &(0x7f0000001880)=""/250, 0xfa) 15:41:41 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x100000001, 0x1, 0x200000000000009}, 0x2c) 15:41:41 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f0000000040)) 15:41:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00\xec\xc5IT\xae\x86\x13\xa1\x06I\x13\x14\xca\xa4J\xb2\xb0BTSu\x84(\xd52\xf0tJm\xa9:}\xec\xe5\xdby\a\xbb\xab\a\x94\xc8\vH\x87\x119\xf8\xffC\xcf\xcb\x92I[q\x10\x93\xa3\xd3\xf1\x83\x16\xce\x10\xa9@J\xb8\x12t\xd0\x04X\xe6\xc1w\xf3\x9fH\x1c\n6\\\x8d\xab@\x87F\x8a\x18B}\f\x039}\x94\xc7K\xa9>\x1c\x18\xf7\x9f\x9e\xc6\x1c\x04\x00\x00\x00\t\x9f\x1e\x98\xc2\x84e\x9b\xe0\xcd\x7f\x81\x82I\xa9_\x8d,#\x1e\x02jh=f\x1e\xd3\x13\x9bN\xd3\x82\xe8\xc5\xa2\xa0S\x88\xc5:\x90\xac]') bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x80000000000003) [ 1868.534639][T12155] usb 2-1: new high-speed USB device number 12 using dummy_hcd 15:41:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$rfkill(r1, &(0x7f0000000000), 0xff2d) read$alg(r1, &(0x7f0000001880)=""/250, 0xfa) 15:41:41 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788, 0x0, @local, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 15:41:41 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f0000000040)) [ 1868.902575][T12155] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 1868.911029][T12155] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.921364][T12155] usb 2-1: config 0 has no interface number 0 [ 1868.927670][T12155] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=c6.08 [ 1868.937047][T12155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.046933][T12155] usb 2-1: config 0 descriptor?? [ 1869.106991][T12155] usb 2-1: bad CDC descriptors [ 1869.115542][T12155] usb 2-1: bad CDC descriptors [ 1869.121159][T12155] cdc_acm 2-1:0.215: Zero length descriptor references [ 1869.128326][T12155] cdc_acm: probe of 2-1:0.215 failed with error -22 [ 1869.295729][T14387] usb 2-1: USB disconnect, device number 12 [ 1870.062354][T14387] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1870.422485][T14387] usb 2-1: config 0 has an invalid interface number: 215 but max is 0 [ 1870.430777][T14387] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.441122][T14387] usb 2-1: config 0 has no interface number 0 [ 1870.447413][T14387] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=c6.08 [ 1870.456638][T14387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.465867][T14387] usb 2-1: config 0 descriptor?? [ 1870.506590][T14387] usb 2-1: bad CDC descriptors [ 1870.513390][T14387] usb 2-1: bad CDC descriptors [ 1870.518923][T14387] cdc_acm 2-1:0.215: Zero length descriptor references [ 1870.526084][T14387] cdc_acm: probe of 2-1:0.215 failed with error -22 [ 1870.704261][T12155] usb 2-1: USB disconnect, device number 13 15:41:44 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r2, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:41:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$rfkill(r1, &(0x7f0000000000), 0xff2d) read$alg(r1, &(0x7f0000001880)=""/250, 0xfa) 15:41:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x401, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) 15:41:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$rfkill(r1, &(0x7f0000000000), 0xff2d) read$alg(r1, &(0x7f0000001880)=""/250, 0xfa) 15:41:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) read(r1, &(0x7f0000000040)=""/228, 0xe4) 15:41:44 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271d, 0x0, &(0x7f0000000040)) 15:41:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0100000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x34}}, 0x0) 15:41:44 executing program 2: unshare(0x20400) r0 = socket(0x800000001e, 0x5, 0x0) listen(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 15:41:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$rfkill(r1, &(0x7f0000000000), 0xff2d) read$alg(r1, &(0x7f0000001880)=""/250, 0xfa) 15:41:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) read$rfkill(r1, &(0x7f0000000000), 0xff2d) read$alg(r1, &(0x7f0000001880)=""/250, 0xfa) 15:41:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x400455c8, 0x0) 15:41:44 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="000100009fd287080304106094b00094d301090212000100000000090477000000197400"], 0x0) 15:41:44 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x9f, 0xb3, 0x31, 0x8, 0x3f0, 0x581d, 0xbec, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x2, 0xff, 0x1, 0x7, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a}}]}}]}}]}}, 0x0) 15:41:44 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac050e02f646aef80001090224000101000000090400000903010200092100000001220000090581030700000000"], 0x0) r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(&(0x7f0000001b80)='/dev/input/event#\x00', 0xea, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) 15:41:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0x0) 15:41:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002b80)=[@rthdrdstopts={{0x18}}, @tclass={{0x14, 0x29, 0x43, 0x800}}], 0x30}}], 0x2, 0x0) 15:41:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0x0) 15:41:45 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0x0) 15:41:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002b80)=[@rthdrdstopts={{0x18}}, @tclass={{0x14, 0x29, 0x43, 0x800}}], 0x30}}], 0x2, 0x0) 15:41:45 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_tgsigqueueinfo(r2, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0x0) 15:41:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002b80)=[@rthdrdstopts={{0x18}}, @tclass={{0x14, 0x29, 0x43, 0x800}}], 0x30}}], 0x2, 0x0) 15:41:45 executing program 2: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0xc0046d00, &(0x7f0000000040)) [ 1872.112459][T14387] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1872.122997][T12155] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1872.220978][T11839] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1872.276817][T31356] cgroup: fork rejected by pids controller in /syz2 [ 1872.353327][T14387] usb 4-1: Using ep0 maxpacket: 8 [ 1872.462452][T11839] usb 1-1: Using ep0 maxpacket: 8 [ 1872.472543][T14387] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1872.480819][T14387] usb 4-1: config 0 has no interface number 0 [ 1872.512715][T12155] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.523896][T12155] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1872.583055][T11839] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 1872.591341][T11839] usb 1-1: config 0 has no interface number 0 [ 1872.597718][T11839] usb 1-1: config 0 interface 47 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1872.607745][T11839] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice= b.ec [ 1872.616959][T11839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.626146][T14387] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=b0.94 [ 1872.635402][T14387] usb 4-1: New USB device strings: Mfr=0, Product=148, SerialNumber=211 [ 1872.643921][T14387] usb 4-1: Product: syz [ 1872.648149][T14387] usb 4-1: SerialNumber: syz [ 1872.654763][T14387] usb 4-1: config 0 descriptor?? [ 1872.660641][T11839] usb 1-1: config 0 descriptor?? [ 1872.668381][T12155] usb 6-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=46.f6 [ 1872.677796][T12155] usb 6-1: New USB device strings: Mfr=174, Product=248, SerialNumber=0 [ 1872.686530][T12155] usb 6-1: Product: syz [ 1872.690811][T12155] usb 6-1: Manufacturer: syz [ 1872.695172][T14387] ftdi_sio 4-1:0.119: FTDI USB Serial Device converter detected [ 1872.704586][T14387] usb 4-1: Detected FT-X [ 1872.711194][T11839] qmi_wwan: probe of 1-1:0.47 failed with error -22 [ 1872.749502][T12155] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input276 [ 1872.902867][T14387] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1872.911553][T12155] usb 1-1: USB disconnect, device number 42 [ 1872.923359][T14387] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1872.945102][T14387] ftdi_sio 4-1:0.119: GPIO initialisation failed: -71 [ 1872.953630][T14387] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1872.970105][T14387] usb 4-1: USB disconnect, device number 81 [ 1872.979753][T14387] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1872.991057][T14387] ftdi_sio 4-1:0.119: device disconnected [ 1873.454580][T12155] usb 6-1: USB disconnect, device number 3 [ 1873.524074][T12155] appletouch 6-1:1.0: input: appletouch disconnected [ 1873.672406][T14387] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1873.792461][T11839] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1873.912451][T14387] usb 4-1: Using ep0 maxpacket: 8 [ 1873.942480][T12155] Bluetooth: hci0: command 0x1003 tx timeout [ 1873.948815][T31333] Bluetooth: hci0: sending frame failed (-49) [ 1874.032634][T14387] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1874.040999][T14387] usb 4-1: config 0 has no interface number 0 [ 1874.047785][T11839] usb 1-1: Using ep0 maxpacket: 8 [ 1874.162609][T14387] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=b0.94 [ 1874.171912][T14387] usb 4-1: New USB device strings: Mfr=0, Product=148, SerialNumber=211 [ 1874.180690][T14387] usb 4-1: Product: syz [ 1874.185103][T14387] usb 4-1: SerialNumber: syz [ 1874.190436][T11839] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 1874.198694][T11839] usb 1-1: config 0 has no interface number 0 [ 1874.204919][T11839] usb 1-1: config 0 interface 47 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1874.214904][T11839] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice= b.ec [ 1874.224054][T11839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.232495][T12155] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1874.233937][T14387] usb 4-1: config 0 descriptor?? [ 1874.246338][T11839] usb 1-1: config 0 descriptor?? [ 1874.284960][T14387] ftdi_sio 4-1:0.119: FTDI USB Serial Device converter detected [ 1874.293879][T14387] usb 4-1: Detected FT-X [ 1874.300604][T11839] qmi_wwan: probe of 1-1:0.47 failed with error -22 [ 1874.489227][T26420] usb 1-1: USB disconnect, device number 43 [ 1874.502533][T14387] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1874.522711][T14387] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1874.543117][T14387] ftdi_sio 4-1:0.119: GPIO initialisation failed: -71 [ 1874.551197][T14387] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1874.568008][T14387] usb 4-1: USB disconnect, device number 82 [ 1874.577642][T14387] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1874.588332][T14387] ftdi_sio 4-1:0.119: device disconnected [ 1874.602737][T12155] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1874.613985][T12155] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1874.752607][T12155] usb 6-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=46.f6 [ 1874.763856][T12155] usb 6-1: New USB device strings: Mfr=174, Product=248, SerialNumber=0 [ 1874.772617][T12155] usb 6-1: Product: syz [ 1874.776893][T12155] usb 6-1: Manufacturer: syz [ 1874.827786][T12155] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input277 [ 1874.984368][T14387] usb 6-1: USB disconnect, device number 4 [ 1875.093662][T14387] appletouch 6-1:1.0: input: appletouch disconnected [ 1876.022394][T12155] Bluetooth: hci0: command 0x1001 tx timeout [ 1876.028608][T31333] Bluetooth: hci0: sending frame failed (-49) [ 1878.102391][T14387] Bluetooth: hci0: command 0x1009 tx timeout 15:41:55 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) syz_open_procfs(0x0, &(0x7f0000272000)) 15:41:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000001800)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002b80)=[@rthdrdstopts={{0x18}}, @tclass={{0x14, 0x29, 0x43, 0x800}}], 0x30}}], 0x2, 0x0) 15:41:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 15:41:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 15:41:55 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000800000000000a0440a32e9cd3f14"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b04d23afecb42d9c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1, 0xff20, 0x0, {}, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "49973bfe9d0445e003651fdb1a5b46ac9ff32e084846ae38e36136f3cc7091ee0e2b23d5c82b9083e557792426c577e82aaa221af173af8ef2fdd1b881ce471a"}}, 0x80}}, 0x0) 15:41:55 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper={0x40106308}], 0x0, 0x0, 0x0}) [ 1882.220791][T31484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:41:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7aed}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)) 15:41:55 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfc00000000000000}, 0x0, 0x0, 0x2, 0x3}, 0x20) 15:41:55 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r0, 0x0, &(0x7f0000000440)) 15:41:55 executing program 3: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) close(r0) 15:41:55 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000180)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f0000000000)) 15:41:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 15:41:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 15:41:55 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x10000001c, 0x0, &(0x7f0000000080)) [ 1883.000193][T31965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:41:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/10, 0xa) 15:41:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7aed}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)) 15:41:56 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000180)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f0000000000)) [ 1883.224935][T32161] input: syz0 as /devices/virtual/input/input278 15:41:56 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 15:41:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7aed}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)) 15:41:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_perm_addr}) 15:41:56 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000180)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f0000000000)) 15:41:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x6}, 0x0}, 0x0) 15:41:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c430800000092", 0x2e}, {&(0x7f00000001c0)="53000000c659ca80fffffffb00bb3212eaf70d6719f68665389c21d5f8ed2fbd13000000e2ffff0000200000000049964333a3031ddc5650b6ffa398b62feeaa37f55aaf208a1435eeb19caaf3645ce06976a5cbc2eb56fc", 0x58}], 0x2) [ 1884.012461][T11839] usb 6-1: new high-speed USB device number 5 using dummy_hcd 15:41:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 15:41:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7aed}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)) 15:41:57 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000180)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf7, 0x0, &(0x7f0000000000)) 15:41:57 executing program 2: symlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 15:41:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f00000087c0)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)=[{0xc}, {0x64, 0x0, 0x0, "f01fd86dcc86bba7ce5238edb2af9c6b1108aceb654aff359cb2d3e11acf2b13ca52d077798eef98bae2b48eefae8662a87f47e6eadb25e68a098437541d12a82738c0e705a523b15227e19c68007d6acef46ca13690"}, {0x44, 0x0, 0x0, "d09a3cc071a64fae9fd4dc2e0c649698ff81e8cf321ccb28386dbe548b3e0bb98accaea9143cc4ba45a83c9bec5d79759db2541735"}, {0xcc, 0x0, 0x0, "bfbab51c9de2cef8e66663a19072248d0647ae4e13a62b161e15fbdd304dbf3bdef53791fb1482ef748afdcf3b96933a2393418c32fcca191696a89c77dbdd0128799eaaf3b95974520fe654dc2f9fc016ff3021b3320f78c56582659a3a376a530febbb182c2844faf6844b4c8579930931180e39e3171ae430761df55207895aa7ad38aae55d32de4edf864ebad786b9c85669a6048aff3aceb0da28b51b26431825347420b498fb3c84dceb8ebc5468fef3bbd4de05e47ffd545033"}, {0x34, 0x0, 0x0, "6ad2d3ea420c1713d7ac69e88ca9512ad4cfb0f06063a68b9060720993cad3e338b5d8cfde1a280d"}, {0x20, 0x0, 0x0, "774d5b199c2c948cd2ae1b78c3b0096767"}], 0x1d4}}, {{0x0, 0x0, &(0x7f0000001f40)=[{0x0, 0x60}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001f80)=[{0xbc, 0x0, 0x0, "e9c0a02fa28e4da371252b4b26d9a7b0a1b8c78d90cd0c6fd33d6fb08f6eaf47a2da5d2870c781131671c6af38107cd8672cf349be2567b5be312c2e0007fd6f767b3c0d6394dcebf8ac81415ed8a16822e76815b6090be8c22625935b3da05c0a82447e75e23f6839222f6f8895f558adc8e91d39331f21863a491b9901560343d223d08e353775e2a080639264e2e713f9d441a0066ceaa5ebd6043b278d2fbcb4547eca2555105eacadb73ca3"}], 0xbc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)=[{0xc}], 0xc}}, {{&(0x7f0000003f80)=@llc, 0x80, 0x0, 0x0, &(0x7f0000005680)=[{0xc}, {0xc}, {0xc8, 0x0, 0x0, "3a21a4cbc6f47eed0f8f09816161fa63c5b834533fb700efb54ec0f7a0960518571a6f58cf7d2f58f04c658d218d42c02041bf1d8ce7f5c80b770c4e9e42f1f965539bc580fa5202efddc2f41efd05cbc758caa9a9f6860deaa1b32eaaec5a40e14b71d5717784812522eed3aeeb503a731e8a5bb6a6760283ab28b978c57be7770be10f06da244506502718d46e04aa6c32ce11f8ded59d43bdead8a93d9ebe039724af4d03d3bcf2ca755e2da49005d89eba4cef5888595c55b775"}, {0x14, 0x0, 0x0, "87068834ab16"}, {0xc}], 0x100}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005d00)=[{0xc}, {0x1c, 0x0, 0x0, "c882a01e016ed8aabd85e4af5056"}, {0x748, 0x0, 0x0, "2b3b4e97e74279535873ed373a5d8b14b57a923e675bd6f2fb7a77c3329b5bb1a98d50b9ba750307081a94f8834a1e279a03cc79d7b3956fd2a35d94bd06586b51338f87259edb06aaa7a637c4b1c28a3c476375b80e1f440ffe581eab3ff43d8f1969c14cb3804bbbc02cf7fee712acb32872562629be84d93146e1b43b0160542fe3ff501403bff25732e12449c243f061e9ecf33b7bf03cefaeab0de14806a9ab864172620c3b0352d77b9ce764707eafde70261e2525071d2b3906b78d1fa557728823268f9a34dd056d508756da5e8b62c9bf57de1eee2c51f2b508ffd5d1d95d1927b719c3fe36897954acc17269c35a2a12e06df64af335ff0395498bb9c231cb2bcc7e22cef0e0403c2aa6bce261d27772c6d1374ba847d44baab0dfce665caf8b3a95cea77bcc21d0edc1de4b903ea0dcbd759ed3dc6db9097643bcad676cacc042506d137f6d7e522f968480ed60fc0dbaa2e9fd0c86ef72a953c22a8e53e11a38d4713357ad65b9bccf02405d56d043672cd526d99aabd14b4724fa6d9f07c5dc4a1b26cadad8bae5f15e9191487df59f33397bf3a75d806c1941afd89d11115250f5d933c4eaf1064ae0f8270931a6b6e4d4aaedd14acd35ae7e06383ed499cb58c05fb21a57969516e3a43d474b1d1bcaff3dfa48bccf32c1b8a1d492addebe404d6edf95197455270044aa831a9f0b6669193c24dc5b469092183b44cf44315000fe7a166c3b8c0667f3e7e7f1dbd3820dc07ed3098b34ea58c067f0e3189cac7de5b7ae5d50247ca14b4a476c8b20af333b6da5b8d1cf2f7e713f9db1bc651f54b12de56ddb4edc14b519b63e29af5c37bc95a4a613ba09c1bfce85483f860dfa5cea43c14dfebe083dbccdbb3cf12acfebab1ae001156e789090161146476e35efbbd21ef5f073e128c6e677ba5b4c1dbe845f97df1351429221196d1bd1a5dee1212a6b0e43f75588134e5620319660f431516f29e643daf962e955e52702a095d7e5d031e0e261a6788e64fd585031f1a593cf9298f56b13873c986020dabd566fdb6c069176b1198bc185e859ae7d3d1c8aa2fabd5cd1abcaecf57dab476abcf1b8c0c4c0b60f41f7ab6bee6a56581e29b31d24c9abacbe66700a176b6db6ebc5ec2490e10f49e32230af3bf7bb9ba936aa63664ff94e7aa8646f23a4e3ae6ac5e7f96592429841cb6aaf91295b6a48e62de80224da95d7e7e5e10aa7d22a279cd5e0d1ba76ec239245f70e11bd59a3a3bf8f6bfddd8d6f996c58f6d2bfd24bb7cdeacdc2f4b909cf31f2cebbe642115c74dc9439ac21489472a6ba0ac95f9c2b02b2c67698d130f31d2728bdbaa2ea67109d15610521e4dcf4688ef4a2cab8a2970b2cf8e9833750332dbc11fc287a2f82b61b7805ddcf467f5441477376fccb7e4eb484f787fc5b043237935a55b0fdcd5cd820d2268ab79cd2d8394f88b102067ca9459e55f9b5fc93ac627ff1588d3b86f6733ebc477fcb4537462ab50a398149b23bad4fe905b18e25e16aaab13382bb565299b11d76cf0e6e7c44297a3e501fb98e4f3df8fec3037b890efdeb8fa1423ff6245ad3869baee1e22959e45e536875098cce7dbed8c1b58cb593a9fba66115bc12365313755e94bb8ea31051010fb3e79f28d7b606f779a605fa40f0709ebafc4165f9a780ed58ee109770f7c94f2b704d623afed29c56164285f440d2166cd037579fb53b5dae35b8178d2e295d9bd36a42deb298315ab9c48e76d28298219a7179144d6179742b47ebe34c4e77a68f592da3b6bd39b08d6432fa5b635d6206c789a816c92004dc713b77db69db9fd0755b39d80dbc046f9a43ba02713063ec1f98b7e20ae1bbae0214c93d5d6d66d8d5e534d6e3c99e87771c5b9e0814e1a8a6c0d7269d12afff9ec11a8d9f884ccd04b33cdefbb8681df9824505e04adc155ffa07e4f340aec2f4caefa34f6602f60566517ff28919373a4883977b783121b64a34edc8ef2d2243a059951f36432405f65984c3b1554f5637d9bab5675ead351ad13b26299c5c5470bf27ead531fc95833063561216b358587e9de0cc740505254a1fe0dd4329416a21ca20a3d0e3bd5be9e5ad4a6e6b8e5bba4cbe945b7861d9dc4b0b8e03198c0f4643bd4f5b15537b48454030355b6e59485828e2b153b0a1c2165d774479ec015efd0e29d3fad7f77cc63df1debf7f5ca387787f3da5f25a372e419cb0a63952e5510e9d294c7057e8eb0fc7f3b7d77c444bf479e56bb5a42bb42b251111fd74e8d9ecbd98d830a31bdb59d5a609554fbfe7e978a91ef38e6bd8b1d3f2b8a5ab844c828a907a6a59b004789fa22db44d582b2946d941b24de51dc529cf43ed448104e02eb3de70a050e67cedd197cdf4d3db507689dcd6236c2992312d9a78d17629d96ef5adea2e18953ea1b3aa5a3fff616a29cb56576909cb1137f4400d3cb7d20655d601d383e322e09569f9bcea66c72b355fe219116e5f434205fd0f9fadbc5b717cfaa13890e24284350913cc00b6e1784c9c7a4c22c932981e46f3de5111a85353ffb5eaa094b2b38e86fee14130137afa0b5177adb824eb2796d60c8bcce51352a8e8d10cd05f9b567434b02568e9"}, {0x18, 0x0, 0x0, "d119d1b861ba801b3924"}], 0x788}}], 0x5, 0x0) 15:41:57 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x8, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000002ffc)=0x98) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0) close(r0) 15:41:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x34}}, 0x0) 15:41:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0xffffffffffffffb3) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x15) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffe79, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0)=0x4005, 0x4) 15:41:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100), 0x8) r4 = dup2(r1, r3) dup3(r4, r2, 0x0) [ 1884.371938][T32581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1884.643448][T11839] usb 6-1: Using ep0 maxpacket: 8 15:41:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x20000340, 0x200007f0, 0x200008e0], 0x0, 0x0, &(0x7f0000000340)=[{0x2}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x108) [ 1884.783756][T11839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1884.794843][T11839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1884.807833][T11839] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.40 [ 1884.817044][T11839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.911951][T11839] usb 6-1: config 0 descriptor?? [ 1885.384962][T11839] logitech 0003:046D:C20E.0072: rdesc size test failed for formula gp [ 1885.394577][T11839] logitech 0003:046D:C20E.0072: unknown main item tag 0x0 [ 1885.401927][T11839] logitech 0003:046D:C20E.0072: unknown main item tag 0x0 [ 1885.409371][T11839] logitech 0003:046D:C20E.0072: unknown main item tag 0x0 [ 1885.416820][T11839] logitech 0003:046D:C20E.0072: unknown main item tag 0x0 [ 1885.424552][T11839] logitech 0003:046D:C20E.0072: unknown main item tag 0x0 [ 1885.431823][T11839] logitech 0003:046D:C20E.0072: unknown main item tag 0x0 [ 1885.440763][T11839] logitech 0003:046D:C20E.0072: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.5-1/input0 [ 1885.585869][T11839] usb 6-1: USB disconnect, device number 5 [ 1886.362372][T11839] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1886.612344][T11839] usb 6-1: Using ep0 maxpacket: 8 [ 1886.752760][T11839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1886.763884][T11839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1886.776878][T11839] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.40 [ 1886.786048][T11839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.795546][T11839] usb 6-1: config 0 descriptor?? 15:42:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x20000340, 0x200007f0, 0x200008e0], 0x0, 0x0, &(0x7f0000000340)=[{0x2}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x108) 15:42:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 15:42:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 15:42:00 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) r1 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 15:42:00 executing program 1: r0 = memfd_create(&(0x7f0000000080)='deSC', 0x3) write(r0, &(0x7f0000000000)="ff", 0xfffffeed) fcntl$addseals(r0, 0x409, 0x8) 15:42:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newae={0x54, 0x1e, 0x701, 0x0, 0x0, {{}, @in6=@mcast1}, [@mark={0xc}, @replay_thresh={0x8}]}, 0x54}, 0x8}, 0x0) [ 1887.154798][T11839] usbhid 6-1:0.0: can't add hid device: -71 [ 1887.161021][T11839] usbhid: probe of 6-1:0.0 failed with error -71 [ 1887.199773][T11839] usb 6-1: USB disconnect, device number 6 [ 1887.240915][ T549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:42:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0xd, &(0x7f0000000080)={0x0, 0x0, 0x4}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r3, &(0x7f0000481000)=""/128, 0x80) 15:42:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x20000340, 0x200007f0, 0x200008e0], 0x0, 0x0, &(0x7f0000000340)=[{0x2}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x108) 15:42:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80) accept(r0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x4) 15:42:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000200)='D', 0x1) 15:42:00 executing program 5: ftruncate(0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) 15:42:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x20000340, 0x200007f0, 0x200008e0], 0x0, 0x0, &(0x7f0000000340)=[{0x2}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x3}]}, 0x108) 15:42:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x25, 0x81000000}, @IFLA_LINKINFO={0x14, 0x12, @bridge={{0x10, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x3c}}, 0x0) 15:42:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000002400070500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x6c}}, 0x0) 15:42:01 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x37e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1f}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00('], 0x0, 0x0, 0x0, 0x0}, 0x0) 15:42:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_JITTER64={0x7}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x6c}}, 0x0) 15:42:01 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 15:42:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000240)=""/85, &(0x7f00000002c0)=0x55) 15:42:01 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0xc020662a, 0x0) [ 1888.219923][ T1207] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 1888.228884][ T1207] netem: change failed [ 1888.240972][ T1208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = dup2(r2, r2) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0}) 15:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) 15:42:01 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = inotify_init() r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000040), 0x0) [ 1888.463851][T12155] usb 3-1: new high-speed USB device number 38 using dummy_hcd 15:42:01 executing program 4: write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES32]]], 0x8) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000040)="ad26635010ffd0e2", 0xfe, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={'crct10dif\x00'}}) 15:42:01 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f00000002c0)="02f96b5200", 0x5) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x3e2) 15:42:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2d) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing, 0x8) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x2, 0x0) [ 1888.712775][T12155] usb 3-1: Using ep0 maxpacket: 16 15:42:01 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x808}, 0x10) [ 1888.835197][T12155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.847027][T12155] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1888.860331][T12155] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1888.869689][T12155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.006708][T12155] usb 3-1: config 0 descriptor?? [ 1889.497782][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.505298][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.512721][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.520017][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.527613][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.535162][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.542694][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.550456][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.558447][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.565990][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.573310][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.580571][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.588067][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.595663][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.602996][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.610250][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.617583][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.625027][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.632955][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.640295][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.647615][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.654910][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.662152][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.669478][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.676812][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.684095][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.691340][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.698669][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.706014][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.713345][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.720605][T12155] samsung 0003:0419:0001.0073: unknown main item tag 0x0 [ 1889.736451][T12155] samsung 0003:0419:0001.0073: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 1889.754432][T12155] usb 3-1: USB disconnect, device number 38 [ 1890.532395][T12155] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1890.772376][T12155] usb 3-1: Using ep0 maxpacket: 16 [ 1890.892698][T12155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.903900][T12155] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1890.917001][T12155] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1890.926175][T12155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.939277][T12155] usb 3-1: config 0 descriptor?? 15:42:04 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r0, 0xffffffffffffffc0, &(0x7f0000000140)) 15:42:04 executing program 0: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x3, &(0x7f0000000040)=[{}, {0x15}, {0x6, 0x0, 0x0, 0x7fffffff}]}) 15:42:04 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000600)=""/246) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000280)=0x5) unshare(0x20400) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000000280)=""/174) 15:42:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x97}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/110, 0x6e) 15:42:04 executing program 1: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x28001) dup3(r1, r0, 0x0) writev(r0, &(0x7f00000003c0), 0x63) [ 1891.365874][T12155] usbhid 3-1:0.0: can't add hid device: -71 [ 1891.372127][T12155] usbhid: probe of 3-1:0.0 failed with error -71 [ 1891.429686][T12155] usb 3-1: USB disconnect, device number 39 15:42:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) 15:42:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x3fe) [ 1891.660263][ T2239] sctp: [Deprecated]: syz-executor.3 (pid 2239) Use of int in max_burst socket option. [ 1891.660263][ T2239] Use struct sctp_assoc_value instead 15:42:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) [ 1891.749727][ T2295] sctp: [Deprecated]: syz-executor.3 (pid 2295) Use of int in max_burst socket option. [ 1891.749727][ T2295] Use struct sctp_assoc_value instead 15:42:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000040)="f30f96aa09006636f26e0f013b3e0f01d166b9800000c00f326635000800000f30660f3882bc0500ad0f59a0ffbc640f01df0f20d86635080000000f22d8", 0x3e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0x2000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:06 executing program 1: prctl$PR_MCE_KILL(0x21, 0x2, 0x0) 15:42:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:42:06 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5800000000000000140100000600000000000000000000000000000000000056000000000300"/88], 0x58}, 0x40) 15:42:06 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) 15:42:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x3fe) [ 1893.766246][ T2420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:06 executing program 1: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 15:42:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x3fe) 15:42:07 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5800000000000000140100000600000000000000000000000000000000000056000000000300"/88], 0x58}, 0x40) 15:42:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 1894.107308][ T2420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x3fe) 15:42:07 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5800000000000000140100000600000000000000000000000000000000000056000000000300"/88], 0x58}, 0x40) 15:42:07 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x200000004, 0x80, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000000080), 0x40000000) 15:42:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:42:07 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5800000000000000140100000600000000000000000000000000000000000056000000000300"/88], 0x58}, 0x40) [ 1894.462850][ T2732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:07 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2600) 15:42:07 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x42001, 0x0) unshare(0x20400) ioctl$int_in(r0, 0x80000000005008, 0x0) 15:42:07 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x200000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = fcntl$dupfd(r2, 0x0, r1) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x15) 15:42:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xfcfc, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = socket(0x10, 0x2, 0x0) clock_gettime(0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) open(0x0, 0x0, 0x0) 15:42:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:42:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) 15:42:07 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x14b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1894.903798][ T3012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x0, "bb71743d51d51b07f53548904ad0ac247555a8a5a8e2546c3e0da4308517715f"}) 15:42:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000560007031dfffd946f610500070000006700000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:42:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x4b564d01, 0xfff]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xae80) 15:42:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) 15:42:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x20000000000002a5, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x6, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 1895.329116][ T3293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:08 executing program 0: ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x18}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffae, &(0x7f0000000040)) 15:42:08 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x7f000000, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 15:42:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x4b564d01, 0xfff]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xae80) 15:42:09 executing program 1: unshare(0x20000) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfffffe8b) creat(&(0x7f0000000200)='./file0\x00', 0x0) 15:42:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000a40)={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c) 15:42:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000002e0001fcffffff00000000efb1000000", @ANYRES32, @ANYBLOB="000000006a1ca81523d24e56910000672d0000f6fff1000c000100746369"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 15:42:09 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x3, 0x21, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 15:42:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a005c3700000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000024f1f450e20ac1000000000000000000000000000000000000000000000000000000000000000000000000010f788c498f9a21db7d57afebe15d24dbdee0793138f8ead60c12d275791a76ba7e574f54bc3c0adf28ee811cfe43e5d89f6e2a899a0cde13c996ae23fd541f1c5f8c1f67dff6c79f8506ef8d60ccf7dc0f5281a9e59cc507b9a2c9c55af43fe8996ae04fe6716c16add1c1fe9bd5e345dd87ff006476ac84df8a9342d7a09fb9054f370c90c9"], 0xb8}}, 0x0) 15:42:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x4b564d01, 0xfff]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xae80) [ 1896.457661][ T3668] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1896.520491][ T3675] dccp_invalid_packet: pskb_may_pull failed 15:42:09 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x100000001, 0x4, 0x100000001, 0x8}) 15:42:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x36) 15:42:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x4b564d01, 0xfff]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xae80) 15:42:09 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000340)=@v3, 0x18, 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) 15:42:09 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=""/81, 0x51}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00\x15\x1d\xecdt\xff\x86\xafhp\xd8\xb0D\xe5}fDg|\x95\x18\x01\x00\x90$\x1a\xb5\xd9\xf7\xc78\xa7\xd3=d\xef\xac[\x80\x10%2Y\xee*\xa1G\xbe.\x9d\xca\xb9[\xdc#\x19\x00'/75) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b0, 0x0) 15:42:10 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0xfffffffffffffff5, 0xfffffffffffffffd) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000000)="fd", 0x1) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) 15:42:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffa5, &(0x7f00000001c0)) 15:42:10 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)) dup2(r1, r0) [ 1897.092742][ T3913] encrypted_key: insufficient parameters specified [ 1897.119830][ T3913] encrypted_key: keyword 'new' not allowed when called from .update method 15:42:10 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000089c0)={0x0, 0x0, &(0x7f0000008980)={&(0x7f0000008680)={0x14}, 0x14}}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x11a}}], 0x18}, 0x0) [ 1897.268106][ T4088] input: syz1 as /devices/virtual/input/input280 15:42:10 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000900)='/dev/uhid\x00', 0x402, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE2(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000fe72797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000260000000000000000000000010000000000000031a57bebf534432a208b64b00f3497c9b52a499174b3fd5ce7eb1b183ad26369ff2fd3b997f87bc0aa52dafa510dcf41c26235651c5dd325d01f24794de2b97610014cc10a02111fa5cc1f381bbe8fccdf58f4dbce0c8c8467bd4862a924f46967b477e2b492e2dff86accff046c4ae4fb365eb7464cc28382a67a990c2bf85c4b87d0f1ba6de49fdf0c9d74538c2db35b6730d9f32129ee2e6f022be8158ae0acb514159a8ee1f42f8c3a0e065093a6d385e0f73c884936d0ae2ae7a0a4a03e68ef914c4b8e3843bdf3925c12168a1a0d79c3e9f7ada442070432fdd08ab9a6904e64334c0a755f936d95a7f08be7dd7ae89ec8de44ab1f11272bc4fbe511a2486e7ae444654fb0f6e890057219a76881ed0465d49a6ce127727cb43c367fb07935971dfcbe8b8a967d022bb983ea61e6cd9833866cd59e2add01f94ef33c7d7eddc4e3e34e6a04a9b28e1314fb200a85ea3fdf91e6d9c31c17a0d9b0900f7cfd25e97908946c6d786b426da2b581c5cde637c74091c2af90af2689237e41dde55af8754d6c0b36747a1e4a0b7f6d187588d078df1b1634749695cf4eb7cf9a2a67a05d0d4591e01f95d02356de1fac14493e1bf8147f3bb9d3f1f4559fe6b2eebd6aca7044136eb5a742da3c61aef3e8c4fa2ddcb1436ccee69719f7d04cf7d445e8db8fb2860247133558abd1f85a65ee0198e8e1faee7280c6c3ed21b1a98d"], 0x13e) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 15:42:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffa5, &(0x7f00000001c0)) [ 1897.522418][T26420] hid-generic 0000:0000:0000.0074: unknown main item tag 0x3 [ 1897.530233][T26420] hid-generic 0000:0000:0000.0074: ignoring exceeding usage max [ 1897.549302][T26420] hid-generic 0000:0000:0000.0074: ignoring exceeding usage max 15:42:10 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=""/81, 0x51}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00\x15\x1d\xecdt\xff\x86\xafhp\xd8\xb0D\xe5}fDg|\x95\x18\x01\x00\x90$\x1a\xb5\xd9\xf7\xc78\xa7\xd3=d\xef\xac[\x80\x10%2Y\xee*\xa1G\xbe.\x9d\xca\xb9[\xdc#\x19\x00'/75) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b0, 0x0) [ 1897.585978][ T4348] input: syz1 as /devices/virtual/input/input281 15:42:10 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) unshare(0x20600) fsync(r0) 15:42:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xd8, 0x18, 0xac, 0x20, 0x93a, 0x262a, 0x3342, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x1, 0x3d, 0x45, 0xd3, 0x0, [], [{{0x9, 0x5, 0x87, 0x22b7158b3ece356f}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1897.801131][T26420] hid-generic 0000:0000:0000.0074: hidraw0: HID v0.01 Device [syz0] on ryz1 15:42:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffa5, &(0x7f00000001c0)) 15:42:10 executing program 3: unshare(0x20600) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 15:42:10 executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1}}], 0x24, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shutdown(r0, 0x2) 15:42:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:11 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=""/81, 0x51}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00\x15\x1d\xecdt\xff\x86\xafhp\xd8\xb0D\xe5}fDg|\x95\x18\x01\x00\x90$\x1a\xb5\xd9\xf7\xc78\xa7\xd3=d\xef\xac[\x80\x10%2Y\xee*\xa1G\xbe.\x9d\xca\xb9[\xdc#\x19\x00'/75) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b0, 0x0) 15:42:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffa5, &(0x7f00000001c0)) [ 1898.142500][T26420] usb 5-1: new high-speed USB device number 10 using dummy_hcd 15:42:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0xffffffffffffff8e, 0x0}}], 0x397, 0x102, 0x0) 15:42:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020100090e000000030800000000000405000600000000000a00000000000004ff7f0000000000000200000100000000000100000000000002004100010000000000000200fd000005000500000000000a004872bbb6896209000055338b2698ffffffff7710aa00ffe8001700410000"], 0x70}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 15:42:11 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)=""/81, 0x51}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00\x15\x1d\xecdt\xff\x86\xafhp\xd8\xb0D\xe5}fDg|\x95\x18\x01\x00\x90$\x1a\xb5\xd9\xf7\xc78\xa7\xd3=d\xef\xac[\x80\x10%2Y\xee*\xa1G\xbe.\x9d\xca\xb9[\xdc#\x19\x00'/75) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1b0, 0x0) 15:42:11 executing program 1: syz_usb_connect(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006b7f42406a080001b01f000000010902120001050000000904c2fe00a044e200"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 1898.393644][T26420] usb 5-1: Using ep0 maxpacket: 32 [ 1898.405845][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="23000000420081aee405e9a400000000020000000000000000000000000084141412a3", 0x23}], 0x1}, 0x0) [ 1898.543135][T26420] usb 5-1: config 0 has an invalid interface number: 179 but max is 0 [ 1898.551528][T26420] usb 5-1: config 0 has no interface number 0 [ 1898.557845][T26420] usb 5-1: config 0 interface 179 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1898.569175][T26420] usb 5-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=33.42 [ 1898.578435][T26420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.673084][T26420] usb 5-1: config 0 descriptor?? [ 1898.688591][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1898.700516][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1898.712113][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1898.726751][T26420] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 1898.772617][T12155] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1899.142567][T12155] usb 2-1: config 5 has an invalid interface number: 194 but max is 0 [ 1899.150947][T12155] usb 2-1: config 5 has no interface number 0 [ 1899.157290][T12155] usb 2-1: config 5 interface 194 has no altsetting 0 [ 1899.164423][T12155] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice=1f.b0 [ 1899.173671][T12155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.226130][T12155] emi26 - firmware loader 2-1:5.194: emi26_probe start [ 1899.234201][T12155] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1899.243257][T12155] usb 2-1: emi26_load_firmware - request_firmware() failed [ 1899.250668][T12155] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 1899.258981][T12155] emi26 - firmware loader: probe of 2-1:5.194 failed with error -5 [ 1899.425878][T12155] usb 2-1: USB disconnect, device number 14 [ 1899.604413][T26420] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input282 [ 1899.808640][T12155] usb 5-1: USB disconnect, device number 10 [ 1900.192314][T14387] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1900.552474][T14387] usb 2-1: config 5 has an invalid interface number: 194 but max is 0 [ 1900.560727][T14387] usb 2-1: config 5 has no interface number 0 [ 1900.567262][T14387] usb 2-1: config 5 interface 194 has no altsetting 0 [ 1900.574210][T14387] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice=1f.b0 [ 1900.583521][T14387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.592472][T12155] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1900.636525][T14387] emi26 - firmware loader 2-1:5.194: emi26_probe start [ 1900.644365][T14387] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1900.653127][T14387] usb 2-1: emi26_load_firmware - request_firmware() failed [ 1900.660480][T14387] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 1900.668730][T14387] emi26 - firmware loader: probe of 2-1:5.194 failed with error -5 [ 1900.834669][T26420] usb 2-1: USB disconnect, device number 15 [ 1900.843869][T12155] usb 5-1: Using ep0 maxpacket: 32 [ 1900.982707][T12155] usb 5-1: config 0 has an invalid interface number: 179 but max is 0 [ 1900.991050][T12155] usb 5-1: config 0 has no interface number 0 [ 1900.997371][T12155] usb 5-1: config 0 interface 179 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1901.008548][T12155] usb 5-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=33.42 [ 1901.017815][T12155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.027453][T12155] usb 5-1: config 0 descriptor?? [ 1901.078203][T12155] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a 15:42:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x17ea3b64, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xa, 0x0, 0x3, {0x0, 0x900, 0x7f, 0x7}}) 15:42:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 15:42:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0xffffffffffffff8e, 0x0}}], 0x397, 0x102, 0x0) 15:42:14 executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000009c0)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "80ffe7", 0x44, 0x0, 0x0, @local, @empty, {[], @gre}}}}}, 0x0) 15:42:14 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, &(0x7f0000012ffc)) dup3(r1, r0, 0x0) [ 1901.351285][T12155] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1901.358759][T12155] gspca_pac7302: probe of 5-1:0.179 failed with error -71 [ 1901.359468][ T4871] __nla_validate_parse: 3 callbacks suppressed [ 1901.359497][ T4871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1901.381836][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010307031dfffd946ff20c0020200a1009000200021d8568671baba20400ff7e", 0x24}], 0x14}, 0x0) [ 1901.418039][T12155] usb 5-1: USB disconnect, device number 11 15:42:14 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x7, 0x0) 15:42:14 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="2c00000013003586000000030000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 1901.545800][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1901.639233][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1901.677562][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:14 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb1e000000010902240001000000000904410002ff5d010009050f1f00ff0700000905830300911b00000000"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000280)={0x15, 0x35b, 0x0}) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x107d) write$hidraw(r0, &(0x7f00000000c0)="047bc0e9eb4465d225fb59c36f17e9445f68550760033d3276a8b0239199b76c4194881d81d94ba7d9c7637f87613ae5156ac2302f1dfd94b834c5baead970fe4e563b3c144f22c41579858b877f", 0x364) 15:42:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102000000cc792b6d5b12b59b"], 0x10}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000000000000000000000000000001700"/128], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 15:42:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="4bb6ad47942dd8b742413130f77d33b9babd6e90787ab8be16a56096a2aaa244eb0a9542401547a54c1774940faf9f5c0fa7ebec00ccfacbcaf16066b101bade48102791791b6893cfb75c00fd1e1f7a3df7440add077023df680d10de814a30ede2af3ab647f8c9261feb180e13108d2853c2c6a3261453860b8ffd36c583412d03e339763d9d003308d5f9f17e95b4e92cf55cfadbbe40e9fceb792957300d8b38d2f29b9a232c001ed37a970aecf220e70eb36bd50a7ee9176615c3779fdfd5cc3e757ab3cb87"}) 15:42:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010003], [0xc1]}) 15:42:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:42:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0xffffffffffffff8e, 0x0}}], 0x397, 0x102, 0x0) 15:42:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc100) write$binfmt_misc(r1, &(0x7f0000000140)={'syz1', "8aa8d822f3f461a80576e943"}, 0x10) [ 1902.038823][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1902.048818][ T5223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1902.111907][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1902.125536][T12155] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1902.155512][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1902.207179][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010003], [0xc1]}) [ 1902.372475][T12155] usb 6-1: Using ep0 maxpacket: 8 15:42:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000150007031dfffd946fa2830002200a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001c00)=[{{0x0, 0xffffffffffffff8e, 0x0}}], 0x397, 0x102, 0x0) 15:42:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0xa}]]}}}]}, 0x3c}}, 0x0) [ 1902.504033][T12155] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1902.512397][T12155] usb 6-1: config 0 has no interface number 0 [ 1902.518608][T12155] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1792, setting to 1024 [ 1902.530011][T12155] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1902.541351][T12155] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb 15:42:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x190, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000800000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000100000008060300736630000010000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff0000000000000000d0000000d000000000010000617270000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000e0000001000000007f00000100000000000000000000000000000000aaaaaaaaaa00000000000000000000000000000072656469726563740000000000000000000000000000000000000800"/400]}, 0x208) [ 1902.550573][T12155] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:42:15 executing program 1: rt_sigprocmask(0x0, 0x0, &(0x7f0000000040), 0x8) [ 1902.659145][ T5642] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 1902.779650][T12155] usb 6-1: config 0 descriptor?? [ 1902.849513][T12155] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input283 [ 1903.030310][T14387] usb 6-1: USB disconnect, device number 7 [ 1903.042513][ C0] xpad 6-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1903.044546][T14387] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1903.912434][T14387] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1904.152400][T14387] usb 6-1: Using ep0 maxpacket: 8 [ 1904.272446][T14387] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1904.280607][T14387] usb 6-1: config 0 has no interface number 0 [ 1904.288318][T14387] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1792, setting to 1024 [ 1904.299481][T14387] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1904.310724][T14387] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1904.319930][T14387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.329481][T14387] usb 6-1: config 0 descriptor?? [ 1904.378816][T14387] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input284 15:42:17 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005ff000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 15:42:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010003], [0xc1]}) 15:42:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x80, 0x32}, {@in6=@local, 0x4d5, 0x6c}, @in6, {}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0x3, 0x8}, 0x70bd25}, 0x0, 0x9}}, 0xf8}, 0x8}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x3, 0xfffffffffffffffd, 0x8000, 0xfffffffffffffffa}, {0x5, 0x49, 0x0, 0x100}, {0x95bf, 0x5, 0x7fff, 0x316}, {0x9, 0x9, 0xff, 0x7}, {0x6e, 0x20, 0x1, 0x100000001}]}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) 15:42:17 executing program 1: rt_sigprocmask(0x0, 0x0, &(0x7f0000000040), 0x8) 15:42:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x5f]}, 0x3c) 15:42:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)=""/143, &(0x7f0000000340)=0x8f) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="f246ce35dbc91d57", 0x8, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendto(0xffffffffffffffff, &(0x7f0000000540)="7ddc", 0x2, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x54}) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000780)={{}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000080)=['cpuacct.stat\x00'], 0xd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1904.713908][T12155] usb 6-1: USB disconnect, device number 8 [ 1904.752216][T12155] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:42:17 executing program 1: rt_sigprocmask(0x0, 0x0, &(0x7f0000000040), 0x8) 15:42:18 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 15:42:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x2c}}, 0x14}}, 0x0) 15:42:18 executing program 1: rt_sigprocmask(0x0, 0x0, &(0x7f0000000040), 0x8) 15:42:18 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="318533735b5bae", 0x7}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000000ac, 0x43, 0x0) 15:42:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x5, [0xc0010003], [0xc1]}) 15:42:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x5f]}, 0x3c) 15:42:18 executing program 1: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x3) 15:42:18 executing program 3: r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, '\x98\xdez\x8cZ\xe9^\xc8y,\x92\x15\x0f\xc3:fO\x13\xee\xabe\xc02)\x01\xcak\xd3\x1b\xde,Q\xf0l_\v\x01O\x9f\x91\xee\xb7d|r@\xf4v\xc8\xd7]\xd0\x00\xaa\x8f\xaf\x8f\xb5t\x02\x00\xa6\xdcM'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000efbfb4)) 15:42:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) 15:42:18 executing program 4: syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}, @selector_unit={0x5}, @extension_unit={0xd, 0x24, 0x8, 0x0, 0x0, 0x0, "03b4f7031369"}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "22fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1001}, @format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x21c, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 15:42:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x5f]}, 0x3c) 15:42:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_RUN(r5, 0x8004ae98, 0x70f000) 15:42:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)) fcntl$notify(r0, 0x402, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}, 0x0) preadv(r0, &(0x7f0000000000), 0x1000000000000293, 0x0) 15:42:18 executing program 0: getrlimit(0x0, &(0x7f0000000140)) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000180)={0x5, "7625038259"}) r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 15:42:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000100)={0x4, 0x4, 0x200000004, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x2e, 0x80ffff, 0x5f]}, 0x3c) 15:42:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) [ 1905.962664][T12155] usb 5-1: new high-speed USB device number 12 using dummy_hcd 15:42:19 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfffffffffffffffa, 0x340) 15:42:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) 15:42:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) 15:42:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="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", 0xfb}], 0x1}, 0x0) [ 1906.232312][T12155] usb 5-1: Using ep0 maxpacket: 32 15:42:19 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x9e\xdez\x88Z\xe9^H\x00\x80\x00\x00\x00\x00\x00`O\x13\xee\xabe\xc029\x01\xdck\x00\x00\x00\x002\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\x00\x00t\xdb\xcf\xa6\xb7M\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, '\x9e\xdez\x88Z\xe9^H\x00\x80\x00\x00\x00\x00\x00`O\x13\xee\xabe\xc029\x01\xdck\x00\x00\x00\x002\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\x00\x00t\xdb\xcf\xa6\xb7M\x00'}) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="07010800000000009d03009750a000"/28], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x3f, @tick=0x9d030097}) [ 1906.375781][T12155] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1906.384712][T12155] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1906.396628][T12155] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1906.612720][T12155] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1906.621911][T12155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.630353][T12155] usb 5-1: Product: syz [ 1906.634683][T12155] usb 5-1: Manufacturer: syz [ 1906.639376][T12155] usb 5-1: SerialNumber: syz [ 1906.952649][T12155] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 1906.960225][T12155] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1906.996531][T12155] usb 5-1: USB disconnect, device number 12 [ 1907.652405][T14387] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1907.892374][T14387] usb 5-1: Using ep0 maxpacket: 32 [ 1908.012558][T14387] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1908.021459][T14387] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1908.033662][T14387] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1908.202513][T14387] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1908.211679][T14387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.219972][T14387] usb 5-1: Product: syz [ 1908.224404][T14387] usb 5-1: Manufacturer: syz [ 1908.229081][T14387] usb 5-1: SerialNumber: syz [ 1908.542651][T14387] usb 5-1: found format II with max.bitrate = 0, frame size=0 [ 1908.550295][T14387] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1908.586501][T14387] usb 5-1: USB disconnect, device number 13 15:42:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000540)={{}, 0x7ff}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 15:42:21 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000000000000dd0800ffff000000000000000000000074fbfc4c00000000000000deffffffffffffff0000000000eaffffff03"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000040)="fc152c7f4136ffff00008551010736b3c9c2dbef6e51d5f4ff010000000000000094b889b980545c", 0xfdd8) 15:42:21 executing program 1: unshare(0x20400) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0xc4c85512, 0x0) 15:42:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) 15:42:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000ebbd0ff3333f2600050018000500005a00e43f0001403c84000000e3e42b8b900ef73933cba340000000000000040000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 15:42:21 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) 15:42:21 executing program 5: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000600)=0x10000dad, 0x4) sendto$inet(r3, &(0x7f00000012c0)=',', 0x903ab, 0x1, 0x0, 0x3cb) 15:42:22 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) 15:42:22 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\'', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x807a00, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x009\xd6\xfe\xa7\x81\xc9\xe1\x88\xb6\xd3\xadX\xf6\xdb\xfa./?+q\xfe\x8b\x11=\xe4\xaa\v9\xdbs#\v\xec\xac\x95\xd6\xe3\xad\xba}\xc1a\xa5\v\xff\xd5|\xe1#\x01;!\xd0\x1e\x0e\xe5\xc9\x14\xd3r\xd6\fe\xde\xfau\x99\xfa\x0f(\x93M\xfc\xa6_\xee\xa0#mDQ`\xad\xa08@S\xde\x1e\x8eIs)\xe3\xd3\xbd\x94j\xa2\xbf\xdb\x0ex\x9f\v\x9d\x90\xab\x1a\xfd\xc4\x9e\x8f\x1f\xa5\xe0\xf9\x04\t\xd4QC\v\xe0\x825y*', 0x2, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000004c0), 0x12) sendfile(r1, r3, 0x0, 0x4) 15:42:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)="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", 0xc91}], 0x1, 0x0, 0x0, 0xb4}}], 0x1, 0x0) 15:42:22 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) listen(r0, 0x404) 15:42:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f610500020b010a1f0000020028080008000400e9110000280000001100ff836016a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:42:22 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) [ 1909.353226][ T7313] __nla_validate_parse: 6 callbacks suppressed [ 1909.353250][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:22 executing program 5: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) uname(&(0x7f0000000000)=""/62) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20002, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 15:42:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f610500020b010a1f0000020028080008000400e9110000280000001100ff836016a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:42:22 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) 15:42:22 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x0) 15:42:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)="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", 0xc91}], 0x1, 0x0, 0x0, 0xb4}}], 0x1, 0x0) [ 1909.717100][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:22 executing program 4: unshare(0x20400) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup(r0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x65, 0x3, 0x0, 0x4) 15:42:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f610500020b010a1f0000020028080008000400e9110000280000001100ff836016a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:42:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x41000000000013, 0xfffffffffffdfffb}, 0x14}, 0x1, 0x68}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 15:42:23 executing program 5: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) uname(&(0x7f0000000000)=""/62) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20002, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) [ 1910.007458][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)="ced85ba518b85112a7b58ca8ddd2632215c409d0416c74ef5bc30467c62e4e3d82733314aa76171142f5af65e62ae4440fbd6eb45f485943e76756ebee804a130951b52954ae8e983dd74f79c422a1d32a6d5deb99ba78262db2b8752201abf6a885db1c87b9b6d70804bd08a127ecdd7432ffd5048bfa5ba6c51f31ffc63d53443c0c7ca26105103e5729c37bfbd93e7214d41a659dabeb731606c78cac593d61dc0133d159e171dd29a8cf88acd0f36eb4a9a794f9e513990ad882cfc722663f3a4048fc1a48803aba94e688d8224aa4ff420f23d045dfa38898ab7a21eb3cf5a23f75cf254b200751d91a1ab7e333daf47e349aeed585d252d6c34a31f03497b0e1bdbbc5cabeb17c61e9977c19c67176d1da600a4e8963670f9494c52b4412e8b9d51f9b948c4f574bcf5c25b7f25b5e6eb9d8fd507fb575cd3745a680d768e753bfbb721038da419daf39d75e25eb0c201283db9ba421788065b2649e05a5850c22e568609bae8b9e052390eaacec8cc3be31fa3ea94b712805d0f13ad9ee1e5eed8de1ea317eccc41c47468969a59d3a68ba850326e24e1cf1c2326c0c6cc37cfa66b70ac716253df6b99d42f31290d7b0118a4a053bd05ca970701fa0a627d99a77159c9a2b2dffc64677dc2a7e880999a8199da4329f034b7dc94b8cba3eb7339728e4d40924b1b3e097066d64e88c54fd58dbfff54121e9d142f442465d261e523658f3795a2ff83db4ed1648fdfff2404fdf4a3128c1750b6daa9f5f686761c9076af16774def9e8a8aa4c38c068e0ec6eaa55a110d7a70ae6031afd84fa6a48cc0917202981c87b8fd96d1d20be64184d97833d3c415902ce502cfd46b138cad4ed4359ad205d381686b3c9af554d8e5957bc5eb2f2643472ce6c1f20a06d34490c819efad70e2fb4354a975cd2be36e624d199d4b8b29d925a93bb5bc68e17481e40fd31c7e1136306977acaae16b5dfde387acf9a5ff76593ea79edac5e69c8625209f8d9fed15c4e93d3a5fddd267271435f4a5ffe8c83ca21668a05acfbae2adcfc5b637e475708bea18f591dd0421357ea10ec3d6039d5674a651b5eaedfc9b9299d11aa96a23563f6ef05bb183749f1fd52ddfebf5f1a2d518946fb0c88cf1904c50f494e2db74f9ea1778b310ee70d7a001f591ad4e4a0ee77353805378eb1a67b2af25eed1add0e7cb894591d52dc6af7edccf96bc4711dfede7929e20c48009f26d9d51b94c1a2cf201243185d51aa6842b523645a989b838475e822e5a714aa814f8aeb6429cb8dd9786a85c8c1f66c321db5af8b9e32ea1c8e31461fff133783f28afbb7459fdc6d496ab2ec3fb87e977a45b169ab1c86ec937e167a8cc418d4beefe2117f763cacde58a871aec331fda9f00b363cb232938abf10a4f00f2466a64516ed70bea0f3bf31fed40d2a184d25b1b46474811e89bfd5db0a2a7d2806a6daa22de7f721152de8f9e404898547811bb643db8ad08a7dd1b4d2741ffc1823769b8998b65a23ef15aa2d02b808118d139aba728d56d50eb315e3f0322bb400f0204149887bcc3391e13784f3c865fc34532f603b359b0bcbb210cc3699ef2a81e7820c6f1df01ec8082c3d71c11431467fbaf4290a30e91aad0ac5c688622a5eceb09258046370e4937887b8eb518b368d0661aec6f82245739ce9eb7834adac8e1ca9bef04f34dcc8ca5c3c549086c0da27b58b5115371d58f546edd9dcd090cc65335a72d47aecd6d2d93fb77c0830be4e30a017a9e127652910a89b402d5d2556cd9984f0c971e4e23dc4c8d70339a0a9a9cb852f0b07503fd23ff1f96089b74bdf3f30343f9eb31484f91787fd0b6e8ca7d5a4807ff54b4cedfd628418dd6949178087aeb1ef42f732bf7efba5a741bcef23bb061e9d4086295e1b8658e51b585c01e673a651c76cce011e68143ac6878caea3d97b125a9b60220472fb9f69b6265040f1b34315a40d1f1497ae8a9b15d396b519fda798223103810a635ffecf5996a19662f701bb84c5e5e17cfe436e9f0a8e3d69a873451f03e3deaf79506a15de675a523f985006e0d9452e1970ff3aa79c697816e811cbfb622d65a1559bca85ac64584f7baaa0af2f8eff34ea6500b6dee8bc9dd27ee783c10606f495e81abe7a8f1466f026207cdbb8f5dce9c388b7b513211090e4f57548ba61fef0e6498638cf99bdf48ff751d76b3f12f26267662bc4b3551940d89dced677df1cee03e38282d92867f9101ffa0b742413a5fc4913126ec293330756252541bb95b17b90167a381d714db142ab41380c4990da7a8ba548825cf1eaf607c443b667ae7faec4d1c274f75f24e669858db1e34541f6dbbdc268158ac30a37380e4a1434cc2eb9a42ea8d49adb39140e1efd19715caf6caf4977daf2eeb079e5d29d408cf61ad6c1ce4ae0f738e768df1203a9b1a54b79722604506586a0d004c6159b7d6f5898bb32814326828d109474e55b49c4d5b5957e0659417029115aedcee47dbe041a4fcc4f165a36d3d44d3d93fbf696e0b79cd48803d91298b0886484f992827806e9efe9daed204a05ce7a3c25a6729b9b70ecf2b33b7cd12da7fc0b7826bdda3aa6b18928f37f9019d706352e4d8e1a8d63aa3e5177a2ab6028699a7ae03f8139dc8452a4d1f8cf2d295ee1653f7d00bf2182885c448da33b0ccbf05729cf0bafcb44fc97e1eb017d05d0b1430f84232f43c70dc0e55d876b8263f7fbfac5c9a48cac056048494205dce04f0703578734d7416f2ffef8f7c06cf4395675734223130111e4a8f30d198e1f9925cd3b9af352d428e540193c5a647f7bb9cf01e53c2db53ba95e849b387e8e612b6e1324719662caa47429039873f373b4b4e0666b188d80c2de06550a8e58303c84874c4183f83f94355d19b184c68dfd10d5fd3b0adc6dd809baebdddea2d483343a1fe27f00d8faa6e882786b70d0d7f02b1efff3bf689c54ebac5f2cdce67078dc9bc2f64384070f76409720cb9b1d490c08aaa2c99a6572f47d635505535e0298f4945aed15379a46418a8f274fc7afc5b6cf59df77185395640f7a1ebe53bf8ffacf62205e3c707eb9d8f4e5ed9f46f306a6086c2e07d0045893e0a6779cf743d9dc124e4038689e6e674698760082946d026df5b3bce040a439f8793ec930f0ffe86c955d02ce9ffbd25d448747a47bff6bb5c6cb880a2783c2e81662c0fbc6dca3fe95cbc56c68bbd446c9a296f79cccc9a03e37657fad3d12b6710de411644c15b58f6872b08f803bdd2c99bc339e5e0e10ced837cc1cc6f9c3876f3ea35b4f6f610f2cd25faa8aefa3f43d51f38dd2db150143fe7d33f816ec51cb1a9cc5e1b47efa19a90c7dfc064dfac1632e7df7eb8f465ade3ee24b8dd4b4c792b329c4a47e2acc74770aa406c7d9fee5e17b9fde8444c70257e54c0f05cb4df53a4a6126bc4c93b39425c20c0b8696e41099c9a081ec4851bc009890df2a143a2e6181695046bda6a97b6480fd7a2058dc787db66065f3123038cc97c528fdb67e83548f85f651f849837cb004e8d067983b9fca2d692c3feed01c00a20e8797cbc7aa4332c387b0e591930525df125d86c56a685003f6130eae6d98b495d0a6ed7fd1a40b0f6d365e776daa06efc7835754875f17c6741166bda80f5b765166f8ce92b0e238b4195109772a793f413f4089987c249db88b56fae2087d051fac6517ff683edfa5b82880cb6c0a5f0680fa0230f941febcf8b062888b5e7d3745eb7bbf7be3cfda8f3c5793cf5461b2d868b065ce81ec02d62e62e883a89c5d331f005d1ede5d3f6eeada5db880d5a33d20584a55e625e8e79e4085efe8f1f60fc1ac5cc0e405f457c8fc97b85c7a475d47360b2332ebab2f9a26deba8550d922f0d00dd7a3759c8d5971c25cbf15f0ad7c3453ae6efd0ea58dae92f7cec23b8ff6920b02ea8ca59cbda7a811e58faece8ad16db3af61ca57b53d2573ab9d7c0aa060a27db7903b5eb27d16b4302b96523a5b813f99bfcc4d7702b0662344b8f773573cf4f475c943b061900553e3bef5e2f73a4777aec1be41d5cb5f40db003d051c2c9612ef6324f312cf28d1209c164931e19fa675452566669282dd174417e44618e689a9716c87319d66b7f7396ae34989cf49bc06a7ac02515656c4a05533b720c7ddaebe6180b8528b77e5ee50c1f2dc7220225cbca1e3f14a094bef3f02010cc94fffcef5659b46d2eaa955258cb897eb063ee43239138a6b6c230dfb870bdb8a4dff5f233a3e2ca6938435ba9e90af911c6b78f473a581c7280c0a2af8dd5b0ffa01b0a3ca50ba9d7d65a74c29c0338cef32de619d5537873bf9cadc2f0b3abefa6d0774d31abd22eeccf558831d1602e3aaa26c967f15dcdd2ee114d58feb0735eab716d1f4b2b54ff3ab513313216a5d21b4b713cc613214db7a8abd8d3b6d0bfe5ea650d4daf13e5338870270857c9a080371d360aa84bda2c689951bd5ecaf14aca39cd4109971a49b9c6b6ca530acfdbad82a2f40f9dd085e313975f96b08fed558b1232dca969703e0decb33", 0xc91}], 0x1, 0x0, 0x0, 0xb4}}], 0x1, 0x0) 15:42:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 15:42:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f610500020b010a1f0000020028080008000400e9110000280000001100ff836016a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:42:23 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x1, 0x1, &(0x7f00000002c0)="bc") 15:42:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)="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", 0xc91}], 0x1, 0x0, 0x0, 0xb4}}], 0x1, 0x0) 15:42:23 executing program 5: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) uname(&(0x7f0000000000)=""/62) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20002, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) [ 1910.430693][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:23 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040), 0x20) 15:42:23 executing program 5: set_mempolicy(0x4003, &(0x7f00003ccff8)=0x7fc, 0x7742) uname(&(0x7f0000000000)=""/62) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20002, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) mbind(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) [ 1910.692514][T14387] usb 5-1: new high-speed USB device number 14 using dummy_hcd 15:42:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2f, 0x101, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x18, 0x3, [@typed={0x14, 0x0, @ipv6=@remote}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1910.799410][ T7970] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 15:42:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast1}}}, 0x15b) close(r0) [ 1911.052861][T14387] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 15:42:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x41000000000013, 0xfffffffffffdfffb}, 0x14}, 0x1, 0x68}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 15:42:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2f, 0x101, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x18, 0x3, [@typed={0x14, 0x0, @ipv6=@remote}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 15:42:24 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040), 0x20) [ 1911.184907][ T8159] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 1911.254687][T14387] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 1911.264159][T14387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.272400][T14387] usb 5-1: Product: syz [ 1911.276668][T14387] usb 5-1: Manufacturer: syz [ 1911.281366][T14387] usb 5-1: SerialNumber: syz [ 1911.378673][T14387] usbhid 5-1:1.0: couldn't find an input interrupt endpoint 15:42:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 15:42:24 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040), 0x20) [ 1911.602556][T12155] usb 5-1: USB disconnect, device number 14 [ 1912.392336][T14387] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1912.772636][T14387] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1912.942590][T14387] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 1912.951772][T14387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.960004][T14387] usb 5-1: Product: syz [ 1912.964312][T14387] usb 5-1: Manufacturer: syz [ 1912.968935][T14387] usb 5-1: SerialNumber: syz [ 1913.015527][T14387] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1913.214620][T12155] usb 5-1: USB disconnect, device number 15 15:42:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x1, 0x1, &(0x7f00000002c0)="bc") 15:42:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2f, 0x101, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x18, 0x3, [@typed={0x14, 0x0, @ipv6=@remote}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 15:42:26 executing program 5: ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f00000002c0)="19") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:42:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x41000000000013, 0xfffffffffffdfffb}, 0x14}, 0x1, 0x68}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 15:42:26 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040), 0x20) 15:42:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 15:42:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x2d6, 0x220047fc, &(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x6abee4e283d9d908, 0x11, 0x0, 0xffffff5a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 15:42:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x2f, 0x101, 0x0, 0x0, {0x2801, 0x1000000}, [@nested={0x18, 0x3, [@typed={0x14, 0x0, @ipv6=@remote}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1913.723619][ T8362] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 15:42:26 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffff41}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000011003599000000030000000007000000", @ANYRES32=r1, @ANYBLOB="00000005000000000c001a0008000200fd0dcbeda0ca82cbfa413fcf0551000400"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 1913.887929][T12155] usb 5-1: new high-speed USB device number 16 using dummy_hcd 15:42:27 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0xfcd1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) 15:42:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x34, 0x2, [@TCA_FQ_RATE_ENABLE={0x28, 0xa}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_BUCKETS_LOG={0x8}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8}]}}]}, 0x60}}, 0x0) 15:42:27 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffff41}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000011003599000000030000000007000000", @ANYRES32=r1, @ANYBLOB="00000005000000000c001a0008000200fd0dcbeda0ca82cbfa413fcf0551000400"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) [ 1914.262789][T12155] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1914.443049][T12155] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 1914.452297][T12155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.460428][T12155] usb 5-1: Product: syz [ 1914.464749][T12155] usb 5-1: Manufacturer: syz [ 1914.469467][T12155] usb 5-1: SerialNumber: syz [ 1914.607426][T12155] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1914.810145][T14387] usb 5-1: USB disconnect, device number 16 15:42:28 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x1, 0x1, &(0x7f00000002c0)="bc") 15:42:28 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x41000000000013, 0xfffffffffffdfffb}, 0x14}, 0x1, 0x68}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) 15:42:28 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffff41}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000011003599000000030000000007000000", @ANYRES32=r1, @ANYBLOB="00000005000000000c001a0008000200fd0dcbeda0ca82cbfa413fcf0551000400"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 15:42:28 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0xfcd1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) 15:42:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0) clone(0x2102801ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x9903000000000000, &(0x7f0000000040)={0x40000000000003, 0x4, 0x4, 0x8000000000008, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 15:42:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x596, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 15:42:28 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffffffffffffff41}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000011003599000000030000000007000000", @ANYRES32=r1, @ANYBLOB="00000005000000000c001a0008000200fd0dcbeda0ca82cbfa413fcf0551000400"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r2, &(0x7f0000000140), 0x332, 0x0) 15:42:28 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0xfcd1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) [ 1915.713510][T12155] usb 5-1: new high-speed USB device number 17 using dummy_hcd 15:42:28 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xc8, &(0x7f0000000140), &(0x7f0000000180)=0x4) 15:42:28 executing program 2: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) waitid(0x1, r0, 0x0, 0x4, 0x0) 15:42:29 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ef007b0000f4afd7030a7c", 0xfcd1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) 15:42:29 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0xfffffd43) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) [ 1916.073203][T12155] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1916.253184][T12155] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 1916.262488][T12155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.270625][T12155] usb 5-1: Product: syz [ 1916.275006][T12155] usb 5-1: Manufacturer: syz [ 1916.279698][T12155] usb 5-1: SerialNumber: syz [ 1916.407686][T12155] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1916.619692][T14387] usb 5-1: USB disconnect, device number 17 15:42:30 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc218, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x1, 0x1, &(0x7f00000002c0)="bc") 15:42:30 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@rand_addr="c783ad86aa70894feee539c890ab7920"]}}}], 0x40}}], 0x2, 0x0) 15:42:30 executing program 5: r0 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 15:42:30 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="5500000018007f6800fe01b2a4a280930a060001fe800002140000003900090023005056020000000400054002f00300000022dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 15:42:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1100, 0x0, 0x38}, [{}]}, 0x58) readv(r0, &(0x7f0000000600), 0x100) 15:42:30 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x7fff, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @local, 0x3}, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}]}, &(0x7f0000000100)=0x10) 15:42:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0800b5055e0bcfe87b0071") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0), 0x20) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x8, 0x0, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) dup3(r3, r1, 0x0) 15:42:30 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@rand_addr="c783ad86aa70894feee539c890ab7920"]}}}], 0x40}}], 0x2, 0x0) 15:42:30 executing program 3: unshare(0x20400) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 15:42:30 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@rand_addr="c783ad86aa70894feee539c890ab7920"]}}}], 0x40}}], 0x2, 0x0) 15:42:30 executing program 5: unshare(0x400) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, 0x0) [ 1917.537052][T12155] usb 5-1: new high-speed USB device number 18 using dummy_hcd 15:42:30 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') exit(0x0) wait4(0x0, 0x0, 0x40000000, 0x0) sendfile(r0, r1, 0x0, 0x1) [ 1917.902792][T12155] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1918.072583][T12155] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 1918.081814][T12155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.090085][T12155] usb 5-1: Product: syz [ 1918.094409][T12155] usb 5-1: Manufacturer: syz [ 1918.099046][T12155] usb 5-1: SerialNumber: syz [ 1918.156345][T12155] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1918.360304][T14387] usb 5-1: USB disconnect, device number 18 15:42:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="6e6e7400000100ce156385b1080f5ca66310f90900563039e444cd7a746fca63c33cb775870020002bed000000000000c75e00800000000000000000ba78030400cc000000ac01000000003f49590000000000fece8580000021f1ffffff9f34096a6a7f8bc9d6db697d2705f9642419515506ed0f365f4bbf007da53e31dbb8b6e6c6e3a731bed0a1ba1991defa981e80a914a341130b760049608baad68cac676f64ae96bf1d5ed36d21e00046ca090000002c3ecaf20080006d9849de3cbd006814bf9b55c103c99661ee92e51f000000ff6521fd52d1b05abcae92554a0fbc9244"], 0x1) 15:42:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000240)="1b", 0x1, 0x8000, 0x0, 0x0) close(r0) 15:42:31 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@rand_addr="c783ad86aa70894feee539c890ab7920"]}}}], 0x40}}], 0x2, 0x0) 15:42:31 executing program 5: unshare(0x20400) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 15:42:31 executing program 1: ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 15:42:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x467fd86b}, 0xc) 15:42:32 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/164, 0xfffffdee}], 0x1, 0x0) 15:42:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) 15:42:32 executing program 1: mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) mlock(&(0x7f000000c000/0x2000)=nil, 0x2000) mlock(&(0x7f0000002000/0xb000)=nil, 0xb000) 15:42:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x0, @broadcast}}) 15:42:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) 15:42:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x880002, 0x0) io_setup(0xb, &(0x7f0000000240)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) [ 1919.663265][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:42:32 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x45, 0xad, 0x8b, 0x8, 0x1631, 0x6200, 0x3950, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8d, 0x7d, 0x32}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 15:42:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235000100000f3048b8568b929eb42e3b020f23c00f21f835010003000f23f8440f01ca66b858008ec00f20d835200000000f22d866bad004ec650f01cf66baf80cb8bb6e038fef66bafc0cec363e450f3066b85e008ed8"}], 0x8b, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1040000004, 0x0, 0x0, 0x0, 0x4cc]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a000200020423df", 0x1c) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:42:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x8, 0x0, "285ce366e321428eb2c3315385f67de31e62aa02a7a3cd7538a770587064b9b05b9a524e70beb949dd07f0e23e324461a9463b1f62511e16c3861b81131e6882075424af1f54be41640a6ec6692d62cb"}, 0x205) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @multicast2, 0x0, 0x0, 'nq\x00'}, {@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x8, 0x0, "5e752537c5b37831627d32017a8d07b80148d1eeb9667225cb26a2ae3e86f4474aa710ee616cc8a2b62cfb7deec1b9b83be3003f8e2a24bfe2593fc6e8ee136f698385e44ad6ea6ab7be3a360c129679"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) [ 1919.746653][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:42:32 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x0, 0x3231564e, 0x280, 0x1e0, 0x0, @stepwise}) 15:42:32 executing program 3: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x18}}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 15:42:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000001c0)={0x9, 0x1}) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000080)={0x0, 0x5, 0x42ca}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) 15:42:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000d40)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_crypto(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40302000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@getstat={0xe0, 0x15, 0x1425, 0x70bd27, 0x25dfdbfb, {{'tgr160-generic\x00'}, [], [], 0x200, 0x800}, ["", "", "", "", "", "", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x10000040}, 0x80) chdir(&(0x7f0000000100)='./file0\x00') mknod(&(0x7f0000000140)='./bus\x00', 0xa88, 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) [ 1920.172433][T14387] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1920.344936][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1920.432578][T14387] usb 5-1: Using ep0 maxpacket: 8 15:42:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x8, 0x0, "285ce366e321428eb2c3315385f67de31e62aa02a7a3cd7538a770587064b9b05b9a524e70beb949dd07f0e23e324461a9463b1f62511e16c3861b81131e6882075424af1f54be41640a6ec6692d62cb"}, 0x205) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @multicast2, 0x0, 0x0, 'nq\x00'}, {@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x8, 0x0, "5e752537c5b37831627d32017a8d07b80148d1eeb9667225cb26a2ae3e86f4474aa710ee616cc8a2b62cfb7deec1b9b83be3003f8e2a24bfe2593fc6e8ee136f698385e44ad6ea6ab7be3a360c129679"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 15:42:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000300)={0x7b, 0x5, [0x40000007], [0xc1]}) 15:42:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000140)=""/163) 15:42:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x8, 0x0, "285ce366e321428eb2c3315385f67de31e62aa02a7a3cd7538a770587064b9b05b9a524e70beb949dd07f0e23e324461a9463b1f62511e16c3861b81131e6882075424af1f54be41640a6ec6692d62cb"}, 0x205) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @multicast2, 0x0, 0x0, 'nq\x00'}, {@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x8, 0x0, "5e752537c5b37831627d32017a8d07b80148d1eeb9667225cb26a2ae3e86f4474aa710ee616cc8a2b62cfb7deec1b9b83be3003f8e2a24bfe2593fc6e8ee136f698385e44ad6ea6ab7be3a360c129679"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) [ 1920.582666][T14387] usb 5-1: New USB device found, idVendor=1631, idProduct=6200, bcdDevice=39.50 [ 1920.591983][T14387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.672345][T14387] usb 5-1: config 0 descriptor?? [ 1920.746685][T10527] kvm_hv_set_msr: 490 callbacks suppressed [ 1920.746719][T10527] kvm [10521]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000007 data 0x0 [ 1921.132937][T14387] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1921.143369][T14387] asix: probe of 5-1:0.0 failed with error -71 [ 1921.158465][T14387] usb 5-1: USB disconnect, device number 19 15:42:34 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcbfb}, 0x1c) 15:42:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) 15:42:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x8, 0x0, "285ce366e321428eb2c3315385f67de31e62aa02a7a3cd7538a770587064b9b05b9a524e70beb949dd07f0e23e324461a9463b1f62511e16c3861b81131e6882075424af1f54be41640a6ec6692d62cb"}, 0x205) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @multicast2, 0x0, 0x0, 'nq\x00'}, {@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x8, 0x0, "5e752537c5b37831627d32017a8d07b80148d1eeb9667225cb26a2ae3e86f4474aa710ee616cc8a2b62cfb7deec1b9b83be3003f8e2a24bfe2593fc6e8ee136f698385e44ad6ea6ab7be3a360c129679"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 15:42:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1094d332fe51e202f6bacea1f648ebc7200000009a31f0a38cf0b38ea9478415ba52f839230900080000000000000048b4d7a622f9af3e4707361d5a9a80d1d8a7aacff8bbb1daf31555f15ced32da6bb43f170f003326d3af5cacaf4c6fc68cd946ca88bb09c2cdee9400000b000000000000000000fc98a362817707c49edcabb5aab028ef7ff5bad708236892baa320"], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:42:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7ff, &(0x7f0000000080)=0x0) close(r0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x20, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 15:42:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1921.862290][T10918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:42:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 15:42:35 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r1, 0x401, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x2c}}, 0x0) 15:42:35 executing program 5: r0 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x0) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x98) 15:42:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x14}]}, 0x30}}, 0x0) 15:42:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) getsockopt$inet_buf(r0, 0x84, 0x7f, 0x0, &(0x7f0000000040)=0x159) 15:42:35 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe3, 0x11, 0xd7, 0x10, 0x4348, 0x5523, 0x403a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0x4f, 0x19, 0x6d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0xac, &(0x7f0000000140)={0x0, 0x0, 0x2, "d6c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1922.488829][T11366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 15:42:35 executing program 1: sendmsg(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000280)=0x400100000001, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(r2, 0x0) dup2(r2, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) socket$inet_udp(0x2, 0x2, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmdt(0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pipe(0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) pipe(0x0) sendto$inet(r3, &(0x7f0000000200)="548b794a15226d9afe49833eb53c041fee95fe9741a6d4", 0x1063, 0x4008002, 0x0, 0xfffffffffffffe65) r4 = socket$netlink(0x10, 0x3, 0x0) dup2(r4, r3) 15:42:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000006, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000001100)=0x14) 15:42:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0x0, 0x0, 0xc0010140], [0xc1]}) [ 1922.702486][T14387] usb 4-1: new high-speed USB device number 83 using dummy_hcd 15:42:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x3, 0x0, &(0x7f0000000240)) timer_gettime(0x0, &(0x7f0000000000)) [ 1922.945810][T14387] usb 4-1: Using ep0 maxpacket: 16 15:42:36 executing program 1: socketpair(0x2000800000001, 0x40000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f00000000c0), 0xffffff19) close(r0) 15:42:36 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0xffffffffffffffd3}], 0xb2, 0x0) [ 1923.062713][T14387] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 1923.070989][T14387] usb 4-1: config 0 has no interface number 0 [ 1923.077339][T14387] usb 4-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=40.3a [ 1923.086553][T14387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:42:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x43, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00000002c0)="030400000300600000000000fff5", 0xe, 0x0, 0x0, 0x0) 15:42:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x5, &(0x7f0000000000)) 15:42:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x4, &(0x7f0000000b00)) [ 1923.239204][T14387] usb 4-1: config 0 descriptor?? [ 1923.286643][T14387] ch341 4-1:0.86: ch341-uart converter detected 15:42:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4a, 0x0, 0xffffffffffffff9c}, 0x2c) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x40000000003, 0x0, 0x77fffb, 0x0, 0x10020000008, 0x0}, 0x2c) dup3(r2, r0, 0x0) 15:42:36 executing program 0: r0 = socket(0x10, 0x4000000000002, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000000)={'sit0\x00\x1f\x80\x12\x00>\x01\xe0\x00\x00\x0e\x02', @ifru_ivalue=0x400000}) [ 1923.732791][T14387] usb 4-1: failed to send control message: -71 [ 1923.739310][T14387] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1923.760849][T14387] usb 4-1: USB disconnect, device number 83 [ 1923.768164][T14387] ch341 4-1:0.86: device disconnected [ 1924.482529][T12155] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1924.722493][T12155] usb 4-1: Using ep0 maxpacket: 16 [ 1924.842550][T12155] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 1924.850858][T12155] usb 4-1: config 0 has no interface number 0 [ 1924.857235][T12155] usb 4-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=40.3a [ 1924.866413][T12155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.875963][T12155] usb 4-1: config 0 descriptor?? [ 1924.914970][T12155] ch341 4-1:0.86: ch341-uart converter detected [ 1925.122642][T12155] usb 4-1: failed to receive control message: -71 [ 1925.129385][T12155] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1925.138877][T12155] usb 4-1: USB disconnect, device number 84 [ 1925.149676][T12155] ch341 4-1:0.86: device disconnected 15:42:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x20, 0x19, 0x7ffffff9, 0x0, 0x0, {0x9801}, [@typed={0xc, 0x3, @u64=0x2}]}, 0x20}}, 0x0) 15:42:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) unshare(0x600) ioctl$SG_SET_TIMEOUT(r0, 0x2201, 0x0) 15:42:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = epoll_create(0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000500)=0x80) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 15:42:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, &(0x7f000000b000/0x3000)=nil}) 15:42:38 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) 15:42:38 executing program 4: unshare(0x24020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000040)="1a03", 0x2}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) [ 1925.578735][T12432] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 15:42:38 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @rand_addr="7c75cb47ad0e73292a4ec8119fcd69de", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local={0xfe, 0x80, [0x2]}}}}}}}, 0x0) 15:42:38 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xb6c}}], 0x34, 0x0, 0x0) 15:42:38 executing program 1: mlockall(0x2) r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000fed000/0x4000)=nil, 0x4000) 15:42:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380100001600210000000000000009000100000000000000000000000000002f017f0110000000000005000000000000000000000000000000fe2f1798fbb8be", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000786c0000000000000000000000000000000000000000000000000000000000000000000000000000000000002dbd700000000000000004004000000000000000010000000800000014000e00fe88000000000000000000000000000020001f000100000029bd700027bd7000000000000000000000000000080000000c001000000000000000000050eaaa539654a1d64ed36deed1dd80156f414fa13e7b76c452afae8fa4cfb4a7af4b27d10053846f6935054bbac8858f8a9b4d82fb940ebba8b9738a912a951d198eceea"], 0x138}}, 0x0) 15:42:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:38 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x58}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3}, 0x48) [ 1925.914745][T12755] netlink: 'syz-executor.5': attribute type 31 has an invalid length. 15:42:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380100001600210000000000000009000100000000000000000000000000002f017f0110000000000005000000000000000000000000000000fe2f1798fbb8be", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000786c0000000000000000000000000000000000000000000000000000000000000000000000000000000000002dbd700000000000000004004000000000000000010000000800000014000e00fe88000000000000000000000000000020001f000100000029bd700027bd7000000000000000000000000000080000000c001000000000000000000050eaaa539654a1d64ed36deed1dd80156f414fa13e7b76c452afae8fa4cfb4a7af4b27d10053846f6935054bbac8858f8a9b4d82fb940ebba8b9738a912a951d198eceea"], 0x138}}, 0x0) 15:42:39 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b6d0608450502800a030000000109029280d6b312000009040000005f3db600"], 0x0) 15:42:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) [ 1926.212572][T12788] input: syz1 as /devices/virtual/input/input285 [ 1926.251808][T12826] netlink: 'syz-executor.5': attribute type 31 has an invalid length. 15:42:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380100001600210000000000000009000100000000000000000000000000002f017f0110000000000005000000000000000000000000000000fe2f1798fbb8be", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) 15:42:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1926.515168][T12997] netlink: 'syz-executor.5': attribute type 31 has an invalid length. [ 1926.554656][T14387] usb 1-1: new high-speed USB device number 44 using dummy_hcd 15:42:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380100001600210000000000000009000100000000000000000000000000002f017f0110000000000005000000000000000000000000000000fe2f1798fbb8be", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) 15:42:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1926.636745][T13056] netlink: 'syz-executor.5': attribute type 31 has an invalid length. [ 1926.812540][T14387] usb 1-1: Using ep0 maxpacket: 8 15:42:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x4012032, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x143041, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xee01}}) 15:42:40 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x58}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3}, 0x48) 15:42:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:40 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x689}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x2, @dev}, @icmp=@parameter_prob={0x4, 0x6, 0x0, 0x0, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 15:42:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv6_getroute={0x1c, 0x1a, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xa568b5b9e04f5378}}, 0x1c}}, 0x0) [ 1926.952647][T14387] usb 1-1: config index 0 descriptor too short (expected 32914, got 18) [ 1926.961163][T14387] usb 1-1: config 179 has too many interfaces: 214, using maximum allowed: 32 [ 1926.970399][T14387] usb 1-1: config 179 has 1 interface, different from the descriptor's value: 214 [ 1926.979804][T14387] usb 1-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 1926.988958][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:42:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x4, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) dup2(r0, r3) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 1927.099215][T13303] fuse: Bad value for 'group_id' [ 1927.160743][T13335] fuse: Bad value for 'group_id' [ 1927.463149][T14387] usb 1-1: string descriptor 0 read error: -71 [ 1927.474356][T14387] gspca_main: xirlink-cit-2.14.0 probing 0545:8002 [ 1927.482846][T14387] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input286 [ 1927.520305][T14387] usb 1-1: USB disconnect, device number 44 [ 1928.292439][T14387] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1928.532325][T14387] usb 1-1: Using ep0 maxpacket: 8 [ 1928.652555][T14387] usb 1-1: config index 0 descriptor too short (expected 32914, got 18) [ 1928.661077][T14387] usb 1-1: config 179 has too many interfaces: 214, using maximum allowed: 32 [ 1928.670142][T14387] usb 1-1: config 179 has 1 interface, different from the descriptor's value: 214 [ 1928.679498][T14387] usb 1-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 1928.688684][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.982683][T14387] usb 1-1: string descriptor 0 read error: -71 [ 1928.993462][T14387] gspca_main: xirlink-cit-2.14.0 probing 0545:8002 [ 1929.001656][T14387] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input287 [ 1929.020525][T14387] usb 1-1: USB disconnect, device number 45 15:42:42 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b6d0608450502800a030000000109029280d6b312000009040000005f3db600"], 0x0) 15:42:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0x0, 0x6, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:42 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x58}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3}, 0x48) 15:42:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r2, &(0x7f0000000140), 0xc0e8c8e08fca5, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) fcntl$setstatus(r3, 0x4, 0x42800) sendmmsg(r3, &(0x7f0000000140), 0xc0e8c8e08fca5, 0x0) dup3(r0, r1, 0x0) 15:42:42 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_usb_connect(0x0, 0xfcfc, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 15:42:42 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'bond_slave_1\x00'}, 0x18) 15:42:42 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x58}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3}, 0x48) 15:42:42 executing program 2: io_setup(0x4000000000006, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_getevents(r0, 0x3, 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f00000000c0)={0x0, 0x989680}) 15:42:42 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'bond_slave_1\x00'}, 0x18) 15:42:42 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcb, 0x65, 0x29, 0x10, 0x644, 0x8020, 0x3ff2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x99, 0x0, 0x0, 0x9, 0x23, 0x38}}]}}]}}, 0x0) [ 1929.662777][T14387] usb 1-1: new high-speed USB device number 46 using dummy_hcd 15:42:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0xc0044d03, &(0x7f0000000080)) 15:42:42 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'bond_slave_1\x00'}, 0x18) [ 1929.933243][T14387] usb 1-1: Using ep0 maxpacket: 8 [ 1930.032488][T12155] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1930.074635][T14387] usb 1-1: config index 0 descriptor too short (expected 32914, got 18) [ 1930.083198][T14387] usb 1-1: config 179 has too many interfaces: 214, using maximum allowed: 32 [ 1930.092185][T14387] usb 1-1: config 179 has 1 interface, different from the descriptor's value: 214 [ 1930.101666][T14387] usb 1-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 1930.110990][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.392660][T12155] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 1930.401779][T12155] usb 4-1: config 0 has no interface number 0 [ 1930.408620][T12155] usb 4-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice=3f.f2 [ 1930.417951][T12155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.427322][T12155] usb 4-1: config 0 descriptor?? [ 1930.432811][T14387] usb 1-1: string descriptor 0 read error: -71 [ 1930.443839][T14387] gspca_main: xirlink-cit-2.14.0 probing 0545:8002 [ 1930.452011][T14387] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input288 [ 1930.476128][T14387] usb 1-1: USB disconnect, device number 46 [ 1930.487045][T12155] hub 4-1:0.153: ignoring external hub [ 1930.802517][T12155] usb 4-1: USB disconnect, device number 85 15:42:43 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b6d0608450502800a030000000109029280d6b312000009040000005f3db600"], 0x0) 15:42:43 executing program 2: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$setperm(0x3, r0, 0x0) 15:42:43 executing program 5: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'bond_slave_1\x00'}, 0x18) 15:42:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0xc0044d03, &(0x7f0000000080)) 15:42:43 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000700000002000000e0000001000000f5000000000800120002000200000000000000000010006c0002030000003f567b000000b20200000000152c0000000000001c0001020014bb00000000000000000000000003000500000000000200ed00e0000001000000ba00000000"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0) 15:42:44 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x3001}) 15:42:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0xc0044d03, &(0x7f0000000080)) 15:42:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0xc0044d03, &(0x7f0000000080)) 15:42:44 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x51, 0x0, 0x0, {}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 1931.372869][T12155] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1931.452539][T12032] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1931.552369][T14387] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1931.612472][T12155] usb 1-1: Using ep0 maxpacket: 8 [ 1931.733388][T12155] usb 1-1: config index 0 descriptor too short (expected 32914, got 18) [ 1931.741982][T12155] usb 1-1: config 179 has too many interfaces: 214, using maximum allowed: 32 [ 1931.751159][T12155] usb 1-1: config 179 has 1 interface, different from the descriptor's value: 214 [ 1931.760773][T12155] usb 1-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 1931.769996][T12155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.792437][T14387] usb 6-1: Using ep0 maxpacket: 8 [ 1931.822779][T12032] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 1931.831185][T12032] usb 4-1: config 0 has no interface number 0 [ 1931.837836][T12032] usb 4-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice=3f.f2 [ 1931.847073][T12032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.856701][T12032] usb 4-1: config 0 descriptor?? [ 1931.893430][T12032] hub 4-1:0.153: ignoring external hub [ 1931.922544][T14387] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1931.930871][T14387] usb 6-1: config 0 has no interface number 0 [ 1931.937358][T14387] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1931.948513][T14387] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1931.959925][T14387] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1931.969066][T14387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.980046][T14387] usb 6-1: config 0 descriptor?? [ 1932.038263][T14387] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1932.050188][T14387] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input289 [ 1932.062731][T12155] usb 1-1: string descriptor 0 read error: -71 [ 1932.074019][T12155] gspca_main: xirlink-cit-2.14.0 probing 0545:8002 [ 1932.082515][T12155] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input290 [ 1932.098030][T12155] usb 1-1: USB disconnect, device number 47 [ 1932.222968][T12032] usb 4-1: USB disconnect, device number 86 [ 1932.239909][T26420] usb 6-1: USB disconnect, device number 9 [ 1932.252512][T26420] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 15:42:45 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 15:42:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904034865161a000700050000060089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) 15:42:45 executing program 2: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/28, 0x24d42ca6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x40a85321, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) 15:42:45 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004b6d0608450502800a030000000109029280d6b312000009040000005f3db600"], 0x0) 15:42:45 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) dup2(r0, r2) [ 1932.676493][T14324] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 15:42:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x35, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x1c, 'team0\x00'}]}, 0x296}}, 0x0) 15:42:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi}]}) [ 1932.902759][T14525] netlink: 'syz-executor.3': attribute type 28 has an invalid length. [ 1932.911016][T14525] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 15:42:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0xffffffffffff9ff9}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000200)={0x1, 0x0, @pic={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfe, 0x0, 0xff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:42:46 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c0b7c708cf106880bf99000000010902240001000000000904350002ebc6cb0009058f0220000000000905021200762877dc"], 0x0) 15:42:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x100000001, 0x100c0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000200), 0x2) getresgid(&(0x7f0000000500), &(0x7f0000000540), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x2, 0x40c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) semctl$GETZCNT(r3, 0x5, 0xf, &(0x7f0000000380)=""/210) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) timerfd_gettime(r1, &(0x7f0000000040)) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0x0, 0x100000000010, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8004700b, &(0x7f0000000900)) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0xfffffffffffffc57, 0x38b0, 0x3, {}, 0x6, 0x80}) get_thread_area(0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x2, 0x4, 0xbee}}, 0x30) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e21, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x1]}, 0x5c) 15:42:46 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1933.022717][T14387] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1933.122716][T11839] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1933.126969][T14542] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1933.263696][T14387] usb 1-1: Using ep0 maxpacket: 8 [ 1933.362874][T11839] usb 6-1: Using ep0 maxpacket: 8 [ 1933.372379][T26420] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1933.383015][T14387] usb 1-1: config index 0 descriptor too short (expected 32914, got 18) [ 1933.391594][T14387] usb 1-1: config 179 has too many interfaces: 214, using maximum allowed: 32 [ 1933.401113][T14387] usb 1-1: config 179 has 1 interface, different from the descriptor's value: 214 [ 1933.410447][T14387] usb 1-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 1933.419605][T14387] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.502835][T11839] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 1933.511028][T11839] usb 6-1: config 0 has no interface number 0 [ 1933.517452][T11839] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1933.528908][T11839] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 27, changing to 8 [ 1933.540169][T11839] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice=1e.eb [ 1933.549368][T11839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.559613][T11839] usb 6-1: config 0 descriptor?? [ 1933.606528][T11839] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1933.618444][T11839] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/input/input291 [ 1933.632564][T26420] usb 3-1: Using ep0 maxpacket: 8 [ 1933.694558][T14387] usb 1-1: string descriptor 0 read error: -71 [ 1933.706957][T14387] gspca_main: xirlink-cit-2.14.0 probing 0545:8002 [ 1933.715403][T14387] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input292 [ 1933.752924][T26420] usb 3-1: config 0 has an invalid interface number: 53 but max is 0 [ 1933.761260][T26420] usb 3-1: config 0 has no interface number 0 [ 1933.767920][T26420] usb 3-1: config 0 interface 53 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 32 [ 1933.778020][T26420] usb 3-1: config 0 interface 53 altsetting 0 endpoint 0x2 has invalid maxpacket 1536, setting to 1024 [ 1933.789478][T26420] usb 3-1: config 0 interface 53 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1933.799692][T26420] usb 3-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=99.bf [ 1933.809066][T26420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.820169][T14387] usb 1-1: USB disconnect, device number 48 [ 1933.841572][T26420] usb 3-1: config 0 descriptor?? [ 1933.910808][T26420] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. 15:42:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000140)={{0x0, 0x1}, {0x20000000000080}, 0x0, 0x1, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 15:42:47 executing program 3: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="0400000000000000000000053882ab000000000000000040d5016c4d7c27e7095577242c6b91a402174ed685176be3f717a72df4c3e0c3d5e74a49f5b73e50f0d9416d332d7e100688c891679102ee28a6c52af0069a0ff5a6da40972f340cc089ad6f3749a4b5c1c8d48e7e2ee915634fed89c06beed535d0e6743bc1398a4de76b3e30b9adcda08606f00430b23486106796b8d266f20a1cd9f0684857bd089e15a1f9138ba01b5975b1c43691d5d3490aecdfedc74705e5e44d946ef46fb5470e57f0a28f410ae0cf87a5cd11640b2ad25cd99c232e9a5c6467dbeda96d79dc52fa4563b42bc67963fa66beaa34f407611253540a5cb8c0dee834fc557352f6bd8aea7e9a9736e70ef7f29bcdda89f217169d7c592013c07cf2f428a50aa03b6b5532da52174d5f26a50699e6b2d516e7ff7fc17ae897c1c72684da8d4afb2341f1cade5844679f6447c3c53371c22c55542d15f49916dec544e1ad308b953d48af9bac70d3f1b5e18c71208dc179fd5e60af4d30b133ca1d93dcb7fdc19f956d38c6cad3e8261a02706e6a10ac6779b8138089d012025e740d22bb2a44c7cbd1191e4bca6d62fee0eb8394317b284f175a7e3bf602f0d1e445d9eb41c389b379386a878d6d6c5e31576180aeab222dda6f9aa939f6ad"]) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="ce67139bc96dae21157ea927244341d95dea3543bba0033f4361721e3c"], 0x1d) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x1000001a0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x200000, 0xfffffffffffffffc}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000280)={0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x80000001) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="700000807d0200000069412d1ccad951fbff016c50fa87a085adde26545f00010003000000040400000004000000a5a104fc00000700000000f7ffffffff0000002d560000001f0076626f786e6569302a5c65102072dd105f91a0f06b657972696e67656d312c08006b657972696e670008773f0286b347020941c4326873c9282615e8ee9a971230dbb5ed9df9f8ec21027c9ba420f853"], 0x70) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2000000080803, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) pread64(r6, &(0x7f0000000640)=""/221, 0xdd, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x12f) listen(r1, 0x0) 15:42:47 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000080000020269a5cdc291e96e7167dd549815de91787d15a77da5302fd46b9f55c044ab05dc005efe703f176"], 0x48}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmsg$can_bcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "e4fd67c1396bed3f"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x7, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "eea9a76841849d7d"}}, 0x48}}, 0x0) 15:42:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) [ 1934.054454][T26420] usb 6-1: USB disconnect, device number 10 [ 1934.062939][T26420] xpad 6-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1934.096583][T11839] usb 3-1: USB disconnect, device number 40 [ 1934.210246][T14867] IPVS: ftp: loaded support on port[0] = 21 15:42:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008c80)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000003a40)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0xffffff94, 0x4, 0x9}]}}}], 0x18}}], 0x1, 0x0) 15:42:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='timers\x00') readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1) lseek(r0, 0x200, 0x0) 15:42:47 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000001580), 0x4) 15:42:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {0x0, @link_local}, 0x8, {0x2, 0x0, @local}, 'bpq0\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @broadcast}, 0x19, {0x2, 0x0, @multicast2}, 'ip6tnl0\x00'}) [ 1934.773904][T14960] IPVS: ftp: loaded support on port[0] = 21 15:42:47 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x1045) r1 = syz_open_procfs(0x0, &(0x7f0000000940)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa9\x9d]\xce\xaa#\x87X\xb0\xbf9\n\x9f!A&$F\x86\xfd\x17\x95me\xd0\x19G\bP5\xa4\x05\x00\xb8\xee\xb3X(\x83\xc2\xee8\\\xa5\xb1\x1aed\x94\x9b\xfb\x1d\x1f\xf2\xccr\x0fV\x88\xdf-\xd5N\x1d+ \xa5\xa1Fm\x85\v\xa1\xf87GAV\"%y\xfas\xdd9\x9e\x96R\x16\x19\xa2Y\x92z\xabc\xec\"A\x90\xcf\x83\xf2\xbb\xdb\xe1\xfb\x90JF\xa8\x80\xa9\xe0\xc8\xf3j\x03\xb4\x911.\x86\xcb\xe8\x05\xdd\x1dRV\x9d \x8c\n7\xe6\xb7ys\xcd \xb5\x92\x913\xddV\xb5\xaa\xd8\"\aj(\xe4\xfc}\xcc*\x1a,_\xb7\xf6\xa4SQ\x1c\xb3\xbe\x1e\tK\x9co\x17pR\xb5\"\xb2Jl2\x0f\xd5\xa5v9\xcc\x8c\x98\xb1\xe3\x00\xc6\n#\x82Up#\x96\xd4L\xa6\x00z\xc7\xfaF_\xf5:5\x0f\xb4sQD\x9c\x14?\x04-\xa3\xea9\xd1\xfc\x03z\x86\x14\xa4M\x8fu\xf9\xcb\xe4\xca\xd1\xf6\xba\xbd\x8dM\xb9\xb6\xc8\x94\xf2\v;\xde\xd1\xf0!\f\xb2\x1b\xb3\xba\xcaI=R7\x9c_\xcc\x8eZ\xae\xc5\xc9\x9e\xbdPMpW\xeeNt\x05S&\xdf\t\x98\xe7\xe8#\xa7\xa0\x9f>\x18e\x1c!\x01\xa8\xae-\xc7\xc1\xda#P\x03\xe4\xee\x91\x84\xd9\xf9|4\xb94\xa2\xa2V\x14\xe7\x99\xf1\xafM\xbbT\xa8\x7f\xb8M\x00\xa3X\xae\x996sb\x80M=\xd4\x9af\x8d\x8c\x16b\xe4\xb2\xb5\b\xcd+p\x9c\x88k8:8OD\vo{(\xca\xa8\xb0\x89\x18\xfa\x9f\xf70xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x8, 0x2, [@tunl_policy=[@IFLA_IPTUN_COLLECT_METADATA={0x4}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) 15:42:49 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x179, 0x10, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, 0xffffffffffffffff, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x346, 0x10, 0x0}, 0x48) 15:42:49 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000001580), 0x4) 15:42:49 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = eventfd2(0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) 15:42:49 executing program 4: timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000007400)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_gettime(0x0, &(0x7f0000000100)) 15:42:49 executing program 3: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="ce67139bc96dae21157ea927244341d95dea3543bba0033f4361721e3c"], 0x1d) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x1000001a0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x200000, 0xfffffffffffffffc}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000280)={0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x80000001) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="700000807d0200000069412d1ccad951fbff016c50fa87a085adde26545f00010003000000040400000004000000a5a104fc00000700000000f7ffffffff0000002d560000001f0076626f786e6569302a5c65102072dd105f91a0f06b657972696e67656d312c08006b657972696e670008773f0286b347020941c4326873c9282615e8ee9a971230dbb5ed9df9f8ec21027c9ba420f853"], 0x70) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2000000080803, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) pread64(r6, &(0x7f0000000640)=""/221, 0xdd, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x12f) listen(r1, 0x0) 15:42:49 executing program 0: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) [ 1936.243121][T15397] IPVS: ftp: loaded support on port[0] = 21 15:42:49 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000001580), 0x4) 15:42:49 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 15:42:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001900)={0xac, &(0x7f00000012c0)={0x0, 0x0, 0x3, "062f87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001040)={0xac, &(0x7f0000000ac0)={0x0, 0x0, 0xe, "3a4d98eb42661cdc730f56d37a49"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 15:42:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@setlink={0x5c, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x1, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, [{0x18, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}]}, 0x5c}}, 0x0) 15:42:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, 0x0) 15:42:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000004000)=0x800000000b96, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0}) sendmmsg(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000140)=@can={0x1d, r2}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="bbe82ec62fb312d22ea055e708ed", 0xe}], 0x1}}], 0x4000000000002df, 0x0) 15:42:50 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000001580), 0x4) [ 1936.942925][T15732] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1937.044355][T26420] usb 5-1: new high-speed USB device number 20 using dummy_hcd 15:42:50 executing program 0: r0 = socket(0x30002000000010, 0x3, 0x0) write(r0, &(0x7f0000000540)="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", 0xfc) 15:42:50 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x26) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0xffffffffffffffff) [ 1937.142742][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.148936][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1937.155269][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.161329][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:42:50 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000002c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180), 0x10}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:42:50 executing program 3: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="ce67139bc96dae21157ea927244341d95dea3543bba0033f4361721e3c"], 0x1d) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x1000001a0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x200000, 0xfffffffffffffffc}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000280)={0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x80000001) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="700000807d0200000069412d1ccad951fbff016c50fa87a085adde26545f00010003000000040400000004000000a5a104fc00000700000000f7ffffffff0000002d560000001f0076626f786e6569302a5c65102072dd105f91a0f06b657972696e67656d312c08006b657972696e670008773f0286b347020941c4326873c9282615e8ee9a971230dbb5ed9df9f8ec21027c9ba420f853"], 0x70) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2000000080803, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) pread64(r6, &(0x7f0000000640)=""/221, 0xdd, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x12f) listen(r1, 0x0) [ 1937.302634][T26420] usb 5-1: Using ep0 maxpacket: 8 [ 1937.423754][T15865] IPVS: ftp: loaded support on port[0] = 21 [ 1937.424566][T26420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.440851][T26420] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1937.454161][T26420] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1937.463394][T26420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:42:50 executing program 0: r0 = socket$inet(0x2, 0x40000000003, 0xeb) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000e00)=@nat={'nat\x00', 0x19, 0x2, 0x2b0, [0x20000ac0, 0x0, 0x0, 0x20000af0, 0x20000c30], 0x3, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000030000000000000000027465616d5f736c6176655f3100000000766c616e30000000000000000000000076657468315f746f5f7465616d00000064756d6d793000000000000000000000aaaaaaaaaaaa0000000000000000000000000000000000000000e0000000e000000010010000737461746973746963000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000003830325f330000000000000000000000000000000000000000000000000000000800000000000000bc000008030000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000078aa01bc0000000000000000000000000000000000000000000001000000feffffff01000000110000000000000000000300736630000010000000000000000064756d6d7d3000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000100030000aaabaaaaaaaa000000ff0000000070000000e0000000100100006172707265706c790000000000000000000000000000000000000000000000001000001ac4755932ab0342ffffff0000fcffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fcffffff00000000434c41535349465900000000000000000000000000000000000000000000000008000000000000009551000000000000"]}, 0x328) [ 1937.480236][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1937.486427][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1937.670019][T26420] usb 5-1: config 0 descriptor?? 15:42:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000000)="e67e0c9e15c60ff9a6886af27dfafeb58626938829d9181fc338dcd4e9d83dbc"}) 15:42:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000004000)=0x800000000b96, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0}) sendmmsg(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000140)=@can={0x1d, r2}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="bbe82ec62fb312d22ea055e708ed", 0xe}], 0x1}}], 0x4000000000002df, 0x0) [ 1938.157724][T26420] cp2112 0003:10C4:EA90.0075: unknown main item tag 0x0 [ 1938.173661][T26420] cp2112 0003:10C4:EA90.0075: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1938.372763][T26420] cp2112 0003:10C4:EA90.0075: Part Number: 0x2F Device Version: 0x87 [ 1939.032680][T26420] cp2112 0003:10C4:EA90.0075: error reading lock byte: -71 [ 1939.043702][T26420] usb 5-1: USB disconnect, device number 20 [ 1939.782715][T11839] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1940.022383][T11839] usb 5-1: Using ep0 maxpacket: 8 [ 1940.142624][T11839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.154329][T11839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1940.167449][T11839] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1940.176663][T11839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.186255][T11839] usb 5-1: config 0 descriptor?? 15:42:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:42:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@rr={0x7, 0x7, 0x0, [@loopback]}, @cipso={0x86, 0x1d, 0x0, [{0x0, 0xd, "072f03915481c57cf89847"}, {0x0, 0xa, "f3b95549783cfc54"}]}, @rr={0x7, 0x17, 0x0, [@local, @broadcast, @multicast1, @broadcast, @multicast2]}, @generic={0x0, 0x2}]}}}}}}}, 0x0) 15:42:53 executing program 3: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="ce67139bc96dae21157ea927244341d95dea3543bba0033f4361721e3c"], 0x1d) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x5e) connect$inet(0xffffffffffffffff, 0x0, 0x5b) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @remote}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x1000001a0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x200000, 0xfffffffffffffffc}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000280)={0xa, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x80000001) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="700000807d0200000069412d1ccad951fbff016c50fa87a085adde26545f00010003000000040400000004000000a5a104fc00000700000000f7ffffffff0000002d560000001f0076626f786e6569302a5c65102072dd105f91a0f06b657972696e67656d312c08006b657972696e670008773f0286b347020941c4326873c9282615e8ee9a971230dbb5ed9df9f8ec21027c9ba420f853"], 0x70) unshare(0x60000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2000000080803, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) pread64(r6, &(0x7f0000000640)=""/221, 0xdd, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x12f) listen(r1, 0x0) 15:42:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r3}) 15:42:53 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001900)={0xac, &(0x7f00000012c0)={0x0, 0x0, 0x3, "062f87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001040)={0xac, &(0x7f0000000ac0)={0x0, 0x0, 0xe, "3a4d98eb42661cdc730f56d37a49"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 15:42:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000004000)=0x800000000b96, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0}) sendmmsg(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000140)=@can={0x1d, r2}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="bbe82ec62fb312d22ea055e708ed", 0xe}], 0x1}}], 0x4000000000002df, 0x0) [ 1940.533187][T11839] usbhid 5-1:0.0: can't add hid device: -71 [ 1940.539470][T11839] usbhid: probe of 5-1:0.0 failed with error -71 [ 1940.580383][T11839] usb 5-1: USB disconnect, device number 21 15:42:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000004000)=0x800000000b96, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x0}) sendmmsg(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000140)=@can={0x1d, r2}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)="bbe82ec62fb312d22ea055e708ed", 0xe}], 0x1}}], 0x4000000000002df, 0x0) [ 1940.632666][T16183] IPVS: ftp: loaded support on port[0] = 21 15:42:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3}) dup2(r0, r1) [ 1940.975253][T11839] usb 5-1: new high-speed USB device number 22 using dummy_hcd 15:42:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}, {{{0x9, 0x5, 0x81, 0x3, 0x1f1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "a313"}, @local=@item_4={0x3, 0x2, 0x0, "ec92853e"}, @global=@item_4={0x3, 0x1, 0x0, "7fe52845"}, @local=@item_4={0x3, 0x2, 0x0, "8c0a56e4"}, @main=@item_4={0x3, 0x0, 0x0, "80e3bfad"}, @main=@item_4={0x3, 0x0, 0x0, "77ddb60f"}, @local, @local=@item_4={0x3, 0x2, 0x0, '\x00\r\x00'}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000040)="b3") 15:42:54 executing program 1: unshare(0x20400) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x80000080045010, &(0x7f0000000040)) [ 1941.232822][T11839] usb 5-1: Using ep0 maxpacket: 8 [ 1941.353333][T11839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1941.364679][T11839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1941.377726][T11839] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1941.387019][T11839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.511331][T11839] usb 5-1: config 0 descriptor?? 15:42:54 executing program 1: unshare(0x8000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mq_open(&(0x7f0000000040)='.n\x00x\x00\xfe\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) [ 1941.552774][T26794] usb 6-1: new high-speed USB device number 11 using dummy_hcd 15:42:54 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 15:42:54 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109023b000101000000090400000002060000052400000005240000000d240f01000000000000000000090582020000000000090503020000000000"], 0x0) 15:42:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\x00') fstat(r0, &(0x7f0000000280)) 15:42:54 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x14Ym1\xa9\xa22\x0fN\xcb\xa2\xba\xe5\xf4\x97\x00\x04\x00\x00', 0x0) write(r0, &(0x7f0000000180)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9a, 0x0, &(0x7f0000000000)=0xfffffcf2) [ 1941.952595][T26794] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1941.963762][T26794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1941.974891][T26794] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1941.988092][T26794] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1941.997319][T26794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.015498][T11839] cp2112 0003:10C4:EA90.0076: unknown main item tag 0x0 [ 1942.061339][T11839] cp2112 0003:10C4:EA90.0076: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1942.087343][T26794] usb 6-1: config 0 descriptor?? [ 1942.102363][T14354] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1942.223251][T11839] cp2112 0003:10C4:EA90.0076: Part Number: 0x2F Device Version: 0x87 [ 1942.342459][T14354] usb 4-1: Using ep0 maxpacket: 32 [ 1942.462792][T14354] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1942.584629][T26794] keytouch 0003:0926:3333.0077: fixing up Keytouch IEC report descriptor [ 1942.597823][T26794] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0077/input/input293 [ 1942.632691][T14354] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1942.642000][T14354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.650807][T14354] usb 4-1: Product: syz [ 1942.655134][T14354] usb 4-1: Manufacturer: syz [ 1942.659840][T14354] usb 4-1: SerialNumber: syz [ 1942.698994][T26794] keytouch 0003:0926:3333.0077: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1942.763897][T14354] usb 4-1: bad CDC descriptors [ 1942.902659][T11839] cp2112 0003:10C4:EA90.0076: error reading lock byte: -71 [ 1942.913676][T11839] usb 5-1: USB disconnect, device number 22 [ 1942.966798][T14354] usb 4-1: USB disconnect, device number 87 [ 1942.997702][T26794] usb 6-1: USB disconnect, device number 11 15:42:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x10000002}) 15:42:56 executing program 0: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0400001b", @ANYRES16, @ANYBLOB="01ffff0000000003000001"], 0x3}, 0x1, 0x6c}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e0000001e00", 0x6}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x3ded5adb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") splice(r0, 0x0, r2, 0x0, 0x200000011002, 0x6) 15:42:56 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x14Ym1\xa9\xa22\x0fN\xcb\xa2\xba\xe5\xf4\x97\x00\x04\x00\x00', 0x0) write(r0, &(0x7f0000000180)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9a, 0x0, &(0x7f0000000000)=0xfffffcf2) 15:42:56 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001900)={0xac, &(0x7f00000012c0)={0x0, 0x0, 0x3, "062f87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001040)={0xac, &(0x7f0000000ac0)={0x0, 0x0, 0xe, "3a4d98eb42661cdc730f56d37a49"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 15:42:56 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x14Ym1\xa9\xa22\x0fN\xcb\xa2\xba\xe5\xf4\x97\x00\x04\x00\x00', 0x0) write(r0, &(0x7f0000000180)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9a, 0x0, &(0x7f0000000000)=0xfffffcf2) [ 1943.742615][T26794] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1943.792803][T11839] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1943.800703][T14354] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1943.982376][T26794] usb 4-1: Using ep0 maxpacket: 32 [ 1944.062333][T14354] usb 5-1: Using ep0 maxpacket: 8 [ 1944.105915][T26794] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1944.162864][T11839] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1944.173943][T11839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1944.185178][T11839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1944.198339][T11839] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1944.207544][T11839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.216612][T14354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1944.227794][T14354] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1944.240895][T14354] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1944.250545][T14354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.261476][T14354] usb 5-1: config 0 descriptor?? [ 1944.272864][T26794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1944.275728][T11839] usb 6-1: config 0 descriptor?? [ 1944.282184][T26794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.295130][T26794] usb 4-1: Product: syz [ 1944.299360][T26794] usb 4-1: Manufacturer: syz [ 1944.304217][T26794] usb 4-1: SerialNumber: syz [ 1944.344706][T26794] usb 4-1: bad CDC descriptors 15:42:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}, {{{0x9, 0x5, 0x81, 0x3, 0x1f1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "a313"}, @local=@item_4={0x3, 0x2, 0x0, "ec92853e"}, @global=@item_4={0x3, 0x1, 0x0, "7fe52845"}, @local=@item_4={0x3, 0x2, 0x0, "8c0a56e4"}, @main=@item_4={0x3, 0x0, 0x0, "80e3bfad"}, @main=@item_4={0x3, 0x0, 0x0, "77ddb60f"}, @local, @local=@item_4={0x3, 0x2, 0x0, '\x00\r\x00'}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000040)="b3") 15:42:57 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='\x14Ym1\xa9\xa22\x0fN\xcb\xa2\xba\xe5\xf4\x97\x00\x04\x00\x00', 0x0) write(r0, &(0x7f0000000180)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x9a, 0x0, &(0x7f0000000000)=0xfffffcf2) 15:42:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "74cdd2285022ecf6", "072c8dc8291ef049c527f2399efeb028", "f6c51441", '\x00\x00\x00\x00\x00\x00\a\x00'}, 0x28) 15:42:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x10000002}) [ 1944.544552][T26794] usb 4-1: USB disconnect, device number 88 [ 1944.632678][T11839] usbhid 6-1:0.0: can't add hid device: -71 [ 1944.640826][T11839] usbhid: probe of 6-1:0.0 failed with error -71 [ 1944.695570][T11839] usb 6-1: USB disconnect, device number 12 [ 1944.765957][T14354] cp2112 0003:10C4:EA90.0078: unknown main item tag 0x0 [ 1944.815771][T14354] cp2112 0003:10C4:EA90.0078: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 15:42:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x10000002}) 15:42:57 executing program 2: lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000780)=@known='user.syz\x00\xbbSR[\xcd\x1d\xc1\xb2\xe5\xcc\x80\xdc\x82\x8c\xd1\xc7\r\xe4#\x93oR\x83|\xe0\xf1\xe1\xf0\xb0\xf0\xf3\x17\x905\x1b\'\xf5\xbe\xf6^\x10\x14\xe9\xba\xf6j\x14\b\x9e\x84\x9c\xce\xf7Y\xecR\xd88\xc0\xeb3\xbfaC\x03\x91\xfa\xe1\xfb\xd3\x9a5*3\x81\xad\xa1Qy\xc6\xc2\xb4q\x8bt(\xec$&\xff\xcd\xc7\x94,\xd8\xb0\x91\x04Y\xebd\xd5MZu}\xe5\xae\xa5\xfcD\xa5\xeb\x94_\x99\x03P\xe3\x97\xcc', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xff3e, 0x0) 15:42:57 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018"], 0x3}}, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 1944.976084][T14354] cp2112 0003:10C4:EA90.0078: Part Number: 0x2F Device Version: 0x87 15:42:58 executing program 0: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) syz_open_dev$sg(0x0, 0x0, 0x7e00) 15:42:58 executing program 2: lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000780)=@known='user.syz\x00\xbbSR[\xcd\x1d\xc1\xb2\xe5\xcc\x80\xdc\x82\x8c\xd1\xc7\r\xe4#\x93oR\x83|\xe0\xf1\xe1\xf0\xb0\xf0\xf3\x17\x905\x1b\'\xf5\xbe\xf6^\x10\x14\xe9\xba\xf6j\x14\b\x9e\x84\x9c\xce\xf7Y\xecR\xd88\xc0\xeb3\xbfaC\x03\x91\xfa\xe1\xfb\xd3\x9a5*3\x81\xad\xa1Qy\xc6\xc2\xb4q\x8bt(\xec$&\xff\xcd\xc7\x94,\xd8\xb0\x91\x04Y\xebd\xd5MZu}\xe5\xae\xa5\xfcD\xa5\xeb\x94_\x99\x03P\xe3\x97\xcc', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xff3e, 0x0) [ 1945.102749][T11839] usb 6-1: new high-speed USB device number 13 using dummy_hcd 15:42:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x10000002}) [ 1945.492666][T11839] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1945.503813][T11839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1945.514927][T11839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1945.528083][T11839] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1945.537318][T11839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.550076][T11839] usb 6-1: config 0 descriptor?? [ 1945.623029][T14354] cp2112 0003:10C4:EA90.0078: error reading lock byte: -71 [ 1945.635535][T14354] usb 5-1: USB disconnect, device number 23 [ 1946.044531][T11839] keytouch 0003:0926:3333.0079: fixing up Keytouch IEC report descriptor [ 1946.058078][T11839] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0079/input/input294 15:42:59 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10c4, 0xea90, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x0, "e95ab04b"}, @global]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001900)={0xac, &(0x7f00000012c0)={0x0, 0x0, 0x3, "062f87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001040)={0xac, &(0x7f0000000ac0)={0x0, 0x0, 0xe, "3a4d98eb42661cdc730f56d37a49"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 15:42:59 executing program 0: r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') fcntl$setown(r1, 0x8, r0) fcntl$setown(r1, 0x8, 0x0) [ 1946.150977][T11839] keytouch 0003:0926:3333.0079: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1946.459995][T26511] usb 6-1: USB disconnect, device number 13 [ 1946.522445][T26794] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1946.762346][T26794] usb 5-1: Using ep0 maxpacket: 8 [ 1946.882616][T26794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1946.893707][T26794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1946.906700][T26794] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1946.915980][T26794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.925855][T26794] usb 5-1: config 0 descriptor?? 15:43:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}, {{{0x9, 0x5, 0x81, 0x3, 0x1f1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "a313"}, @local=@item_4={0x3, 0x2, 0x0, "ec92853e"}, @global=@item_4={0x3, 0x1, 0x0, "7fe52845"}, @local=@item_4={0x3, 0x2, 0x0, "8c0a56e4"}, @main=@item_4={0x3, 0x0, 0x0, "80e3bfad"}, @main=@item_4={0x3, 0x0, 0x0, "77ddb60f"}, @local, @local=@item_4={0x3, 0x2, 0x0, '\x00\r\x00'}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000040)="b3") 15:43:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x154, 0x0, 0x27) 15:43:00 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018"], 0x3}}, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 15:43:00 executing program 2: lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000780)=@known='user.syz\x00\xbbSR[\xcd\x1d\xc1\xb2\xe5\xcc\x80\xdc\x82\x8c\xd1\xc7\r\xe4#\x93oR\x83|\xe0\xf1\xe1\xf0\xb0\xf0\xf3\x17\x905\x1b\'\xf5\xbe\xf6^\x10\x14\xe9\xba\xf6j\x14\b\x9e\x84\x9c\xce\xf7Y\xecR\xd88\xc0\xeb3\xbfaC\x03\x91\xfa\xe1\xfb\xd3\x9a5*3\x81\xad\xa1Qy\xc6\xc2\xb4q\x8bt(\xec$&\xff\xcd\xc7\x94,\xd8\xb0\x91\x04Y\xebd\xd5MZu}\xe5\xae\xa5\xfcD\xa5\xeb\x94_\x99\x03P\xe3\x97\xcc', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xff3e, 0x0) 15:43:00 executing program 0: r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') fcntl$setown(r1, 0x8, r0) fcntl$setown(r1, 0x8, 0x0) 15:43:00 executing program 2: lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f0000000780)=@known='user.syz\x00\xbbSR[\xcd\x1d\xc1\xb2\xe5\xcc\x80\xdc\x82\x8c\xd1\xc7\r\xe4#\x93oR\x83|\xe0\xf1\xe1\xf0\xb0\xf0\xf3\x17\x905\x1b\'\xf5\xbe\xf6^\x10\x14\xe9\xba\xf6j\x14\b\x9e\x84\x9c\xce\xf7Y\xecR\xd88\xc0\xeb3\xbfaC\x03\x91\xfa\xe1\xfb\xd3\x9a5*3\x81\xad\xa1Qy\xc6\xc2\xb4q\x8bt(\xec$&\xff\xcd\xc7\x94,\xd8\xb0\x91\x04Y\xebd\xd5MZu}\xe5\xae\xa5\xfcD\xa5\xeb\x94_\x99\x03P\xe3\x97\xcc', &(0x7f0000fc0000)='//selinux\x00\x00\x01\x01', 0xff3e, 0x0) 15:43:00 executing program 0: r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') fcntl$setown(r1, 0x8, r0) fcntl$setown(r1, 0x8, 0x0) 15:43:00 executing program 2: r0 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000140)=0x8, 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002) 15:43:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x42, 0x0, 0x0) [ 1947.332463][T11839] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1947.395703][T26794] cp2112 0003:10C4:EA90.007A: unknown main item tag 0x0 15:43:00 executing program 0: r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') fcntl$setown(r1, 0x8, r0) fcntl$setown(r1, 0x8, 0x0) [ 1947.435015][T26794] cp2112 0003:10C4:EA90.007A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1947.603040][T26794] cp2112 0003:10C4:EA90.007A: Part Number: 0x2F Device Version: 0x87 [ 1947.723607][T11839] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1947.734746][T11839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1947.746127][T11839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1947.759298][T11839] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1947.768549][T11839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.781877][T11839] usb 6-1: config 0 descriptor?? [ 1948.263556][T26794] cp2112 0003:10C4:EA90.007A: error reading lock byte: -71 [ 1948.264919][T11839] keytouch 0003:0926:3333.007B: fixing up Keytouch IEC report descriptor [ 1948.289603][T26794] usb 5-1: USB disconnect, device number 24 [ 1948.299570][T11839] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.007B/input/input295 [ 1948.397117][T11839] keytouch 0003:0926:3333.007B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1948.691945][T11839] usb 6-1: USB disconnect, device number 14 15:43:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_names\x00') lseek(r0, 0x3, 0x0) 15:43:01 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0xa}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xd, 0x2f, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x18) 15:43:02 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018"], 0x3}}, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) 15:43:02 executing program 2: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/282], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, &(0x7f00000000c0)={0x0, 0x0, 0x80, {0x80, 0x0, "ab4d8f6234f601c63ced48493c0220094f0f5adf48c0121948dbfd93824837ca1b0afa54c0e0a50eaf6cb9523f9738ef2e48412fcb253a20f5622286dacefc8a49012258103a4aa375b90c95719fb3433d742f4d15a19853aa440bebdc0d6bf15e4bf70338c39fef96fc66357a32857224cef2b8fdc8c3149a38d71cbf7b"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000480)={0x0, 0x0, 0x2, {0x2}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x81}, 0x0}, &(0x7f0000000f00)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:43:02 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mlockall(0x0) 15:43:02 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x80ffffff, 0xa, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 15:43:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10001000008912, &(0x7f00000000c0)="fadba5095e0bcfe47bf070") r1 = socket$inet(0x10, 0x20000000000002, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="100000001e00070740fffd946f610500", 0x10}], 0x1}, 0x0) 15:43:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}, {{{0x9, 0x5, 0x81, 0x3, 0x1f1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "a313"}, @local=@item_4={0x3, 0x2, 0x0, "ec92853e"}, @global=@item_4={0x3, 0x1, 0x0, "7fe52845"}, @local=@item_4={0x3, 0x2, 0x0, "8c0a56e4"}, @main=@item_4={0x3, 0x0, 0x0, "80e3bfad"}, @main=@item_4={0x3, 0x0, 0x0, "77ddb60f"}, @local, @local=@item_4={0x3, 0x2, 0x0, '\x00\r\x00'}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000040)="b3") 15:43:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)) 15:43:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x100000000014, 0x0, 0x8}, 0x3c) [ 1949.532792][T11839] usb 3-1: new high-speed USB device number 42 using dummy_hcd 15:43:02 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x80ffffff, 0xa, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 1949.594357][T26511] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1949.640648][T18170] debugfs: File '18167' in directory 'proc' already present! 15:43:02 executing program 4: r0 = socket(0x100000010, 0x20000000802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f00018000480ed4ead800000e0d45cffffffffff0008000f00080000e7", 0x24) [ 1949.693363][T18170] binder: 18167:18170 ioctl c018620c 20000000 returned -1 15:43:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)) [ 1949.782573][T11839] usb 3-1: Using ep0 maxpacket: 16 15:43:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$FUSE_STATFS(r0, &(0x7f0000000200)={0x60}, 0x60) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) [ 1949.878871][T18178] debugfs: File '18177' in directory 'proc' already present! [ 1949.902682][T11839] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1949.911046][T11839] usb 3-1: config 0 has no interface number 0 [ 1949.917698][T11839] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1949.925091][T18178] binder: 18177:18178 ioctl c018620c 20000000 returned -1 [ 1949.926899][T11839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:43:03 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)='\f', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8000000000000000}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018"], 0x3}}, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) [ 1949.974806][T26511] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1949.985936][T26511] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1949.996993][T26511] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1950.010120][T26511] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1950.019306][T26511] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.063831][T11839] usb 3-1: config 0 descriptor?? [ 1950.080304][T26511] usb 6-1: config 0 descriptor?? [ 1950.325068][T11839] input: GTCO_CalComp as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.219/input/input296 [ 1950.526012][T11839] usb 3-1: USB disconnect, device number 42 [ 1950.554877][T26511] keytouch 0003:0926:3333.007C: fixing up Keytouch IEC report descriptor [ 1950.568552][T26511] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.007C/input/input297 [ 1950.577708][T11839] gtco 3-1:0.219: gtco driver disconnected [ 1950.653851][T26511] keytouch 0003:0926:3333.007C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1950.960974][T26511] usb 6-1: USB disconnect, device number 15 [ 1951.312471][T11839] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1951.572478][T11839] usb 3-1: Using ep0 maxpacket: 16 [ 1951.692595][T11839] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 1951.700865][T11839] usb 3-1: config 0 has no interface number 0 [ 1951.708271][T11839] usb 3-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 1951.717505][T11839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.726858][T11839] usb 3-1: config 0 descriptor?? 15:43:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00007300080001007166710048000200000000000000002000"/92], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0x701, 0x0, 0x0, {0x0, r4}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0x701, 0x0, 0x0, {0x0, r4, {0x8}}, [@filter_kind_options=@f_basic={{0xc, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) 15:43:05 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x80ffffff, 0xa, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 15:43:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)) 15:43:05 executing program 3: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x20000000021) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/igmp6\x00') sendfile(r0, r1, 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) lstat(0x0, 0x0) getgid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000, 0x0, 0x0, 0x12]}}}}, 0x48) semget$private(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000500)}}, 0x18) 15:43:05 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'user.', '/proc/self//exe\x00\xed6\x93\x0e_\x17@F \xe5\xeaj\x92\x194\x8c\x15e\x1c\xe3\x03\xc3:k~O\x8cc\x05\xff,\xdd\xb3\x87Uh|\xe7\xc1hs\x04\x1f\xec7\xf3k\xa3s\xe1\xcd\xd9\xbe:@\x1c?\xb3v5i\xb4\xef\xceN\x89\xe5n\x01=v\xbdI\xe8\x93UT\xeb\xbaV\x8f+x.R\xb7c\xed\x8cZ\xa9V\xfc\xe6\xaf\xcc\x91\x12\xce\x9e\xf5C\xfc\xd8\x1d2\xe6;.\x96\xfd1e\x8f\xd7J\x0f\x96\xaegh\x01]\x94\x9aI\xac5#\xc4\'\x8d\xce\xdf\x8e\x13\x7f\xc3\xdf\xaaD\xbc\x82\xa0Q/h\xcc.p\xd7\xd4&l[\x8fH\xe3\xe1\x1b\a\x8d\x96\xcf4]\xd2$\xb3\xb4D\xef\xca\xb7\xd6_\x87nOW\xfa\x86\xb9\x96F-{Z\xe4g\x14\xa1\xda\x93\xb9\xe3\xafh\xd2T\xc8\xd2I\xf0\x87\xbe\x024\xf0\xab7x\xbb\xdah\xfb&\xcf\xda-\x02\xc9\x10B'}) 15:43:05 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x87fff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f00000003c0)={0x40000000003, @win={{0x1}, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0}}) [ 1952.088656][T11839] gtco 3-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 1952.097151][T11839] gtco: probe of 3-1:0.219 failed with error -5 15:43:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407000904000200071010000400feffffff0800000000000000", 0x19e) [ 1952.151175][T18407] debugfs: File '18406' in directory 'proc' already present! [ 1952.161687][T11839] usb 3-1: USB disconnect, device number 43 15:43:05 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'user.', '/proc/self//exe\x00\xed6\x93\x0e_\x17@F \xe5\xeaj\x92\x194\x8c\x15e\x1c\xe3\x03\xc3:k~O\x8cc\x05\xff,\xdd\xb3\x87Uh|\xe7\xc1hs\x04\x1f\xec7\xf3k\xa3s\xe1\xcd\xd9\xbe:@\x1c?\xb3v5i\xb4\xef\xceN\x89\xe5n\x01=v\xbdI\xe8\x93UT\xeb\xbaV\x8f+x.R\xb7c\xed\x8cZ\xa9V\xfc\xe6\xaf\xcc\x91\x12\xce\x9e\xf5C\xfc\xd8\x1d2\xe6;.\x96\xfd1e\x8f\xd7J\x0f\x96\xaegh\x01]\x94\x9aI\xac5#\xc4\'\x8d\xce\xdf\x8e\x13\x7f\xc3\xdf\xaaD\xbc\x82\xa0Q/h\xcc.p\xd7\xd4&l[\x8fH\xe3\xe1\x1b\a\x8d\x96\xcf4]\xd2$\xb3\xb4D\xef\xca\xb7\xd6_\x87nOW\xfa\x86\xb9\x96F-{Z\xe4g\x14\xa1\xda\x93\xb9\xe3\xafh\xd2T\xc8\xd2I\xf0\x87\xbe\x024\xf0\xab7x\xbb\xdah\xfb&\xcf\xda-\x02\xc9\x10B'}) 15:43:05 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x80ffffff, 0xa, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) 15:43:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)) 15:43:05 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'user.', '/proc/self//exe\x00\xed6\x93\x0e_\x17@F \xe5\xeaj\x92\x194\x8c\x15e\x1c\xe3\x03\xc3:k~O\x8cc\x05\xff,\xdd\xb3\x87Uh|\xe7\xc1hs\x04\x1f\xec7\xf3k\xa3s\xe1\xcd\xd9\xbe:@\x1c?\xb3v5i\xb4\xef\xceN\x89\xe5n\x01=v\xbdI\xe8\x93UT\xeb\xbaV\x8f+x.R\xb7c\xed\x8cZ\xa9V\xfc\xe6\xaf\xcc\x91\x12\xce\x9e\xf5C\xfc\xd8\x1d2\xe6;.\x96\xfd1e\x8f\xd7J\x0f\x96\xaegh\x01]\x94\x9aI\xac5#\xc4\'\x8d\xce\xdf\x8e\x13\x7f\xc3\xdf\xaaD\xbc\x82\xa0Q/h\xcc.p\xd7\xd4&l[\x8fH\xe3\xe1\x1b\a\x8d\x96\xcf4]\xd2$\xb3\xb4D\xef\xca\xb7\xd6_\x87nOW\xfa\x86\xb9\x96F-{Z\xe4g\x14\xa1\xda\x93\xb9\xe3\xafh\xd2T\xc8\xd2I\xf0\x87\xbe\x024\xf0\xab7x\xbb\xdah\xfb&\xcf\xda-\x02\xc9\x10B'}) 15:43:05 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400806c, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 1952.670076][T18823] debugfs: File '18810' in directory 'proc' already present! [ 1952.715733][T18823] binder: 18810:18823 ioctl c018620c 20000000 returned -1 15:43:05 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random="a8abf670821b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffffa888, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "07d1f6", 0x0, "071ccd"}}}}}}, 0x0) 15:43:05 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'user.', '/proc/self//exe\x00\xed6\x93\x0e_\x17@F \xe5\xeaj\x92\x194\x8c\x15e\x1c\xe3\x03\xc3:k~O\x8cc\x05\xff,\xdd\xb3\x87Uh|\xe7\xc1hs\x04\x1f\xec7\xf3k\xa3s\xe1\xcd\xd9\xbe:@\x1c?\xb3v5i\xb4\xef\xceN\x89\xe5n\x01=v\xbdI\xe8\x93UT\xeb\xbaV\x8f+x.R\xb7c\xed\x8cZ\xa9V\xfc\xe6\xaf\xcc\x91\x12\xce\x9e\xf5C\xfc\xd8\x1d2\xe6;.\x96\xfd1e\x8f\xd7J\x0f\x96\xaegh\x01]\x94\x9aI\xac5#\xc4\'\x8d\xce\xdf\x8e\x13\x7f\xc3\xdf\xaaD\xbc\x82\xa0Q/h\xcc.p\xd7\xd4&l[\x8fH\xe3\xe1\x1b\a\x8d\x96\xcf4]\xd2$\xb3\xb4D\xef\xca\xb7\xd6_\x87nOW\xfa\x86\xb9\x96F-{Z\xe4g\x14\xa1\xda\x93\xb9\xe3\xafh\xd2T\xc8\xd2I\xf0\x87\xbe\x024\xf0\xab7x\xbb\xdah\xfb&\xcf\xda-\x02\xc9\x10B'}) 15:43:05 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x1, r1}) dup2(r1, r0) 15:43:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f00000000c0)=0x1000371, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000002140)={0x2, 0x100004e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140)="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", 0x5bd, 0x0, 0x0, 0x0) 15:43:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{}]}) ioctl$KVM_SET_LAPIC(r3, 0xc080aebe, &(0x7f0000000180)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fcd2a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 15:43:06 executing program 3: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x20000000021) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/igmp6\x00') sendfile(r0, r1, 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) lstat(0x0, 0x0) getgid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000, 0x0, 0x0, 0x12]}}}}, 0x48) semget$private(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000500)}}, 0x18) 15:43:06 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random="a8abf670821b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffffa888, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "07d1f6", 0x0, "071ccd"}}}}}}, 0x0) 15:43:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0xffffffffffffffff) 15:43:06 executing program 1: unshare(0x4000400) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) r2 = dup2(r1, r0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) 15:43:06 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random="a8abf670821b", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffffa888, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "07d1f6", 0x0, "071ccd"}}}}}}, 0x0) 15:43:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0xffffffffffffffff) 15:43:06 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2162, 0x0, 0x0, 0x0, 0x33f, 0x0, 0x2, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x34d, 0x10, 0x0, 0x1d1}, 0xfffffffffffffe0c) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890b, &(0x7f0000000000)) 15:43:06 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="fb783f75d4daa3ee6a8fb16688072970"}]}, &(0x7f0000000180)=0x10) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000480)={r1}, 0x8) 15:43:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0xffffffffffffffff) 15:43:07 executing program 3: openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x20000000021) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/igmp6\x00') sendfile(r0, r1, 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) lstat(0x0, 0x0) getgid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000, 0x0, 0x0, 0x12]}}}}, 0x48) semget$private(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000500)}}, 0x18) 15:43:07 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdf1f43}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 15:43:07 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt6_stats\x00') dup3(r0, r1, 0x0) 15:43:08 executing program 1: mount(0x0, 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000009000/0x4000)=nil, 0x4000) munlockall() 15:43:08 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001b80)=[@hoplimit={{0x11, 0x29, 0x6}}], 0x18}}], 0x2, 0x0) 15:43:08 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 15:43:08 executing program 3: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 15:43:08 executing program 1: mount(0x0, 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000009000/0x4000)=nil, 0x4000) munlockall() 15:43:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4002}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:43:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 15:43:09 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) 15:43:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0xd}, {0x1}, {0x7}]}) 15:43:09 executing program 1: mount(0x0, 0x0, &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mlock(&(0x7f0000009000/0x4000)=nil, 0x4000) munlockall() [ 1956.127134][T20592] device nr0 entered promiscuous mode 15:43:09 executing program 3: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 15:43:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\x8b\xaa\xffIb\x9e\xc1\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) 15:43:09 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0D\x19v\xb9I\xdf\xfe\x04\x00\x00\x00\x00\x00\x00\x00\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:43:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) 15:43:09 executing program 3: r0 = socket$inet6(0x10, 0x108000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000019007faf37c0f2b2a4a280930a000010000243dc90052369390009002f000000010000001900050000000000000000000004d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 15:43:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4002}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 15:43:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x83) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x7) [ 1957.096675][T21020] device nr0 entered promiscuous mode 15:43:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x24020400) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 15:43:10 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r2, 0x0, 0x800000bf) 15:43:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:43:10 executing program 1: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x10004) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x18000) getresuid(&(0x7f00000004c0), &(0x7f0000003280), &(0x7f00000032c0)) 15:43:10 executing program 4: syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x6, 0x543, 0xff7f, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8dffffff00000000, 0x0, 0xfe03, 0x0, 0x0, 0xffffca88], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3818, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x5}, [@hopopts={0x18, 0x1, [], [@enc_lim={0x18}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) 15:43:10 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x91, &(0x7f0000000140), &(0x7f0000000040)=0xc6) 15:43:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 15:43:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r2}]]}}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_ADDRESS={0x8, 0x1, @broadcast}]}, 0x28}}, 0x0) 15:43:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000001c0)={{0x81}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x5, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x265580, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r4, r5, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000000000000c00080001000000000000000c0008006c000000000000000c000200f52c2f74000000000c00060000a666414e000000000000050100000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x20004811) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f00000001c0)={{0x81}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) unshare(0x40000000) 15:43:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:43:11 executing program 1: unshare(0x2000400) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:43:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 15:43:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2000000000d30, &(0x7f0000000500)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x316, 0x9, 0x0, 0x1, r4}]) [ 1958.079570][T21687] IPVS: ftp: loaded support on port[0] = 21 15:43:11 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vxcan1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x3, [{}, {}, {}]}}) 15:43:11 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0xfffffffa, 0x4) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, 0x0}}], 0x2, 0x0) 15:43:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000001c0)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xfd, 0x0, &(0x7f0000000000)) 15:43:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6a, 0xa, 0xffc2}}, &(0x7f0000000180)='EP\xd4\x02\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x3, 0x2fe, &(0x7f0000000000)=""/195}, 0x48) 15:43:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002900070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000200687462001c000200180002000300"/48], 0x48}}, 0x0) 15:43:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 15:43:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2000000000d30, &(0x7f0000000500)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x316, 0x9, 0x0, 0x1, r4}]) 15:43:11 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0xfffffffa, 0x4) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, 0x0}}], 0x2, 0x0) 15:43:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 15:43:12 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) unshare(0x20400) select(0x40, &(0x7f0000001300), 0x0, &(0x7f0000001380)={0x3f}, &(0x7f00000013c0)={0x0, 0x2710}) 15:43:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2000000000d30, &(0x7f0000000500)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x316, 0x9, 0x0, 0x1, r4}]) 15:43:12 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0xfffffffa, 0x4) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, 0x0}}], 0x2, 0x0) 15:43:12 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf1, 0x12, 0xcf, 0x8, 0x565, 0x3, 0xd29c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x0, 0xc8, 0x4c, 0x9d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:43:12 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0xfffffffa, 0x4) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, 0x0}}], 0x2, 0x0) 15:43:12 executing program 0: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/11, 0x2}], 0x10000000000000dc) 15:43:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2000000000d30, &(0x7f0000000500)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x316, 0x9, 0x0, 0x1, r4}]) 15:43:12 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @ipv4}, 0x1c) [ 1959.632599][T26511] usb 5-1: new high-speed USB device number 25 using dummy_hcd 15:43:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 15:43:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020807031dfffd944ef20c0020200a0009000500021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 1959.872892][T26511] usb 5-1: Using ep0 maxpacket: 8 15:43:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x32, 0x0, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x4000], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast1}}}}}}}, 0x0) 15:43:13 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 1959.992988][T26511] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1960.001382][T26511] usb 5-1: config 0 has no interface number 0 [ 1960.007729][T26511] usb 5-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=d2.9c [ 1960.016945][T26511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.128459][T26511] usb 5-1: config 0 descriptor?? 15:43:13 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', ':\x00'}, 0x141) 15:43:13 executing program 5: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x4000000000000032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001680)={'security\x00'}, &(0x7f0000000080)=0x54) [ 1960.169896][T23067] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1960.287658][T23067] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 15:43:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10}, 0x3c) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000080), 0xc6) close(r0) [ 1960.387363][T23067] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1960.407758][T26511] kaweth 5-1:0.197: Firmware present in device. [ 1960.613850][T26511] kaweth 5-1:0.197: Statistics collection: 0 [ 1960.620038][T26511] kaweth 5-1:0.197: Multicast filter limit: 0 [ 1960.626505][T26511] kaweth 5-1:0.197: MTU: 0 [ 1960.631006][T26511] kaweth 5-1:0.197: Read MAC address 00:00:00:00:00:00 [ 1960.832778][T26511] kaweth: probe of 5-1:0.197 failed with error -5 [ 1960.843901][T26511] usb 5-1: USB disconnect, device number 25 [ 1961.592367][T26511] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1961.832287][T26511] usb 5-1: Using ep0 maxpacket: 8 [ 1961.952793][T26511] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 1961.961165][T26511] usb 5-1: config 0 has no interface number 0 [ 1961.968852][T26511] usb 5-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=d2.9c [ 1961.978113][T26511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.989703][T26511] usb 5-1: config 0 descriptor?? 15:43:15 executing program 4: syz_usb_connect(0x0, 0x42, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x14, 0xa8, 0x3, 0x40, 0x4d8, 0x83, 0x930d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0x2, 0x2, 0x1, 0x0, [@uac_as={[@as_header={0x7}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) 15:43:15 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109024a000101003a000904000060020600000b04000000684c05a1000005240000000d240f0100000000004000000009058103790101750909058201ee000000ff090503020000000000"], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 15:43:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x57e, 0x4) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 15:43:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) bind$inet(r0, &(0x7f0000df1000)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008041, &(0x7f000057f000)={0x2, 0x4e20, @loopback}, 0x10) fcntl$setsig(r0, 0xa, 0x12) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffffc) sendto$inet(r0, &(0x7f0000001140)="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"/4099, 0x1003, 0x9, 0x0, 0x0) 15:43:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 15:43:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 1962.262752][T26511] kaweth 5-1:0.197: Firmware present in device. [ 1962.337150][T23496] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1962.357441][T23499] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1962.377162][T26511] kaweth 5-1:0.197: Error reading configuration (-71), no net device created [ 1962.386660][T26511] kaweth: probe of 5-1:0.197 failed with error -5 [ 1962.416167][T23496] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1962.455080][T26511] usb 5-1: USB disconnect, device number 26 15:43:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 15:43:15 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) [ 1962.645636][T26794] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1962.656348][T23716] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 15:43:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 1962.690415][T23716] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. 15:43:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) [ 1962.790050][T23721] sctp: [Deprecated]: syz-executor.1 (pid 23721) Use of int in max_burst socket option deprecated. [ 1962.790050][T23721] Use struct sctp_assoc_value instead [ 1962.796107][T23722] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1962.866420][T23722] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1962.883421][T26511] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1962.905372][T26794] usb 6-1: Using ep0 maxpacket: 32 15:43:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mkdir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(0x0, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) 15:43:16 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xc, 0x0, 0x0, @mcast1}}, 0x24) [ 1963.023139][T26794] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1963.034191][T26794] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1963.047887][T26794] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1963.233078][T26794] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1963.242422][T26794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.250564][T26794] usb 6-1: Product: syz [ 1963.254904][T26794] usb 6-1: Manufacturer: syz [ 1963.259594][T26794] usb 6-1: SerialNumber: syz [ 1963.302672][T26511] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 1963.311165][T26511] usb 5-1: config 0 has no interface number 0 [ 1963.317912][T26511] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=93.0d [ 1963.327168][T26511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.337708][T26794] usb 6-1: bad CDC descriptors [ 1963.348243][T26511] usb 5-1: config 0 descriptor?? [ 1963.395533][T26511] ims_pcu: probe of 5-1:0.189 failed with error -22 [ 1963.521650][T14354] usb 6-1: USB disconnect, device number 16 [ 1963.595163][T26511] usb 5-1: USB disconnect, device number 27 [ 1964.292414][T14354] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1964.362415][T11839] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1964.532291][T14354] usb 6-1: Using ep0 maxpacket: 32 [ 1964.652486][T14354] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1964.663563][T14354] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1964.676754][T14354] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1964.722681][T11839] usb 5-1: config 0 has an invalid interface number: 189 but max is 0 [ 1964.730967][T11839] usb 5-1: config 0 has no interface number 0 [ 1964.737461][T11839] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=93.0d [ 1964.746706][T11839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1964.756473][T11839] usb 5-1: config 0 descriptor?? [ 1964.796955][T11839] ims_pcu: probe of 5-1:0.189 failed with error -22 [ 1964.872693][T14354] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1964.881827][T14354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.890142][T14354] usb 6-1: Product: syz [ 1964.894391][T14354] usb 6-1: Manufacturer: syz [ 1964.899086][T14354] usb 6-1: SerialNumber: syz [ 1964.944026][T14354] usb 6-1: bad CDC descriptors [ 1964.994605][T26511] usb 5-1: USB disconnect, device number 28 [ 1965.194590][T26794] usb 6-1: USB disconnect, device number 17 15:43:18 executing program 4: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) unshare(0x20400) fcntl$setlease(r0, 0x400, 0x2) 15:43:18 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207c804a01a000000880367fb0a000200380ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 15:43:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:43:18 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0xe) 15:43:18 executing program 1: r0 = syz_usb_connect(0x0, 0x320, &(0x7f0000001f40)={{0x12, 0x1, 0x0, 0xfd, 0x77, 0x89, 0x40, 0xac8, 0xc301, 0x8b4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0xd6, 0xcb, 0xa4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0xac, &(0x7f0000001700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:43:18 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109024a000101003a000904000060020600000b04000000684c05a1000005240000000d240f0100000000004000000009058103790101750909058201ee000000ff090503020000000000"], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) [ 1965.406027][T23948] __nla_validate_parse: 2 callbacks suppressed [ 1965.406053][T23948] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. 15:43:18 executing program 0: socket$isdn(0x22, 0x3, 0x10) r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3f, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0x5f}], 0x1, 0x0) 15:43:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1965.694156][T26794] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1965.703464][T26511] usb 6-1: new high-speed USB device number 18 using dummy_hcd 15:43:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) dup3(r0, r1, 0x0) 15:43:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15:43:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1965.942877][T26511] usb 6-1: Using ep0 maxpacket: 32 15:43:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1966.053181][T26794] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 1966.061473][T26794] usb 2-1: config 0 has no interface number 0 [ 1966.069070][T26794] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=8b.4c [ 1966.078324][T26794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.087956][T26511] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1966.098886][T26511] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1966.112055][T26511] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1966.169707][T26794] usb 2-1: config 0 descriptor?? 15:43:19 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) set_mempolicy(0x1, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000004001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) 15:43:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x7db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbe, 0x6}}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x2c) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x4, {0x8}}, 0x18) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x400) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280), &(0x7f00000002c0)=0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1966.217601][T26794] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 1966.312934][T26511] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1966.322354][T26511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.330458][T26511] usb 6-1: Product: syz [ 1966.334956][T26511] usb 6-1: Manufacturer: syz [ 1966.339671][T26511] usb 6-1: SerialNumber: syz 15:43:19 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) [ 1966.534602][T26511] usb 6-1: bad CDC descriptors [ 1966.592866][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1966.599243][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:43:19 executing program 2: memfd_create(&(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) sendfile(r1, r0, 0x0, 0x1f7) [ 1966.761787][T14354] usb 6-1: USB disconnect, device number 18 [ 1967.524843][T26794] gspca_vc032x: reg_w err -71 [ 1967.529788][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.535288][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.540614][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.546011][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.551342][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.556768][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.562094][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.567526][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.572909][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.578250][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.583688][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.589029][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.594474][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.599807][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.605239][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.610571][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.616001][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.621504][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.626932][T26794] gspca_vc032x: I2c Bus Busy Wait 80 [ 1967.632300][T26794] gspca_vc032x: Unknown sensor... [ 1967.637643][T26794] vc032x: probe of 2-1:0.22 failed with error -22 [ 1967.649158][T26794] usb 2-1: USB disconnect, device number 16 [ 1968.105882][T24117] vivid-000: kernel_thread() failed [ 1968.292630][T26794] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1968.662600][T26794] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 1968.670898][T26794] usb 2-1: config 0 has no interface number 0 [ 1968.677269][T26794] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=8b.4c [ 1968.686415][T26794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.695906][T26794] usb 2-1: config 0 descriptor?? [ 1968.736985][T26794] gspca_main: vc032x-2.14.0 probing 0ac8:c301 15:43:22 executing program 1: r0 = syz_usb_connect(0x0, 0x320, &(0x7f0000001f40)={{0x12, 0x1, 0x0, 0xfd, 0x77, 0x89, 0x40, 0xac8, 0xc301, 0x8b4c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0xd6, 0xcb, 0xa4}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0xac, &(0x7f0000001700), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:43:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002800010000000000000000000000000000000000000000000500"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newtfilter={0x74, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}]}}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 15:43:22 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109024a000101003a000904000060020600000b04000000684c05a1000005240000000d240f0100000000004000000009058103790101750909058201ee000000ff090503020000000000"], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 15:43:22 executing program 2: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) 15:43:22 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x7db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbe, 0x6}}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r1}, 0x2c) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x4, {0x8}}, 0x18) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x400) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280), &(0x7f00000002c0)=0x8) clone(0x0, 0x0, 0x0, 0x0, 0x0) 15:43:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x18032, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f00000006c0), 0x1) [ 1968.982913][T26794] gspca_vc032x: reg_w err -71 [ 1968.987666][T26794] ===================================================== [ 1968.994625][T26794] BUG: KMSAN: uninit-value in read_sensor_register+0x4b7/0xd30 [ 1969.002190][T26794] CPU: 0 PID: 26794 Comm: kworker/0:0 Not tainted 5.4.0-rc3+ #0 [ 1969.009858][T26794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.019943][T26794] Workqueue: usb_hub_wq hub_event [ 1969.024968][T26794] Call Trace: [ 1969.028265][T26794] dump_stack+0x191/0x1f0 [ 1969.032597][T26794] kmsan_report+0x14a/0x2f0 [ 1969.037118][T26794] __msan_warning+0x73/0xf0 [ 1969.041619][T26794] read_sensor_register+0x4b7/0xd30 [ 1969.046813][T26794] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1969.052701][T26794] sd_init+0x2cf3/0x4530 [ 1969.056946][T26794] ? sd_config+0x270/0x270 [ 1969.061361][T26794] gspca_dev_probe2+0xe93/0x2230 [ 1969.066305][T26794] gspca_dev_probe+0x346/0x3b0 [ 1969.071072][T26794] sd_probe+0x8d/0xa0 [ 1969.075063][T26794] ? sd_s_ctrl+0xdd0/0xdd0 [ 1969.079735][T26794] usb_probe_interface+0xd19/0x1310 [ 1969.084933][T26794] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1969.090823][T26794] ? usb_register_driver+0x860/0x860 [ 1969.096103][T26794] really_probe+0xd91/0x1f90 [ 1969.100698][T26794] driver_probe_device+0x1ba/0x510 [ 1969.105896][T26794] __device_attach_driver+0x5b8/0x790 [ 1969.111268][T26794] bus_for_each_drv+0x28e/0x3b0 [ 1969.116283][T26794] ? deferred_probe_work_func+0x400/0x400 [ 1969.122000][T26794] __device_attach+0x489/0x750 [ 1969.126780][T26794] device_initial_probe+0x4a/0x60 [ 1969.132335][T26794] bus_probe_device+0x131/0x390 [ 1969.137535][T26794] device_add+0x25b5/0x2df0 [ 1969.142064][T26794] usb_set_configuration+0x309f/0x3710 [ 1969.147537][T26794] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1969.153609][T26794] generic_probe+0xe7/0x280 [ 1969.158195][T26794] ? usb_choose_configuration+0xae0/0xae0 [ 1969.163909][T26794] usb_probe_device+0x146/0x200 [ 1969.168752][T26794] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1969.174641][T26794] ? usb_register_device_driver+0x500/0x500 [ 1969.180529][T26794] really_probe+0xd91/0x1f90 [ 1969.185126][T26794] driver_probe_device+0x1ba/0x510 [ 1969.190235][T26794] __device_attach_driver+0x5b8/0x790 [ 1969.195628][T26794] bus_for_each_drv+0x28e/0x3b0 [ 1969.200469][T26794] ? deferred_probe_work_func+0x400/0x400 [ 1969.206189][T26794] __device_attach+0x489/0x750 [ 1969.210966][T26794] device_initial_probe+0x4a/0x60 [ 1969.215997][T26794] bus_probe_device+0x131/0x390 [ 1969.220844][T26794] device_add+0x25b5/0x2df0 [ 1969.225357][T26794] usb_new_device+0x23e5/0x2fb0 [ 1969.230216][T26794] hub_event+0x581d/0x72f0 [ 1969.234665][T26794] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1969.240550][T26794] ? led_work+0x720/0x720 [ 1969.244874][T26794] ? led_work+0x720/0x720 [ 1969.249194][T26794] process_one_work+0x1572/0x1ef0 [ 1969.254242][T26794] worker_thread+0x111b/0x2460 [ 1969.259016][T26794] kthread+0x4b5/0x4f0 [ 1969.263076][T26794] ? process_one_work+0x1ef0/0x1ef0 [ 1969.268273][T26794] ? kthread_blkcg+0xf0/0xf0 [ 1969.272859][T26794] ret_from_fork+0x35/0x40 [ 1969.277269][T26794] [ 1969.279605][T26794] Uninit was created at: [ 1969.283840][T26794] kmsan_internal_poison_shadow+0x60/0x110 [ 1969.289632][T26794] kmsan_slab_alloc+0xaa/0x130 [ 1969.294384][T26794] kmem_cache_alloc_trace+0x8c5/0xd20 [ 1969.299748][T26794] gspca_dev_probe2+0x30d/0x2230 [ 1969.304687][T26794] gspca_dev_probe+0x346/0x3b0 [ 1969.309474][T26794] sd_probe+0x8d/0xa0 [ 1969.313447][T26794] usb_probe_interface+0xd19/0x1310 [ 1969.318646][T26794] really_probe+0xd91/0x1f90 [ 1969.323238][T26794] driver_probe_device+0x1ba/0x510 [ 1969.328344][T26794] __device_attach_driver+0x5b8/0x790 [ 1969.333704][T26794] bus_for_each_drv+0x28e/0x3b0 [ 1969.338544][T26794] __device_attach+0x489/0x750 [ 1969.343310][T26794] device_initial_probe+0x4a/0x60 [ 1969.348321][T26794] bus_probe_device+0x131/0x390 [ 1969.353170][T26794] device_add+0x25b5/0x2df0 [ 1969.357663][T26794] usb_set_configuration+0x309f/0x3710 [ 1969.363115][T26794] generic_probe+0xe7/0x280 [ 1969.367607][T26794] usb_probe_device+0x146/0x200 [ 1969.372454][T26794] really_probe+0xd91/0x1f90 [ 1969.377053][T26794] driver_probe_device+0x1ba/0x510 [ 1969.382155][T26794] __device_attach_driver+0x5b8/0x790 [ 1969.387530][T26794] bus_for_each_drv+0x28e/0x3b0 [ 1969.392392][T26794] __device_attach+0x489/0x750 [ 1969.397149][T26794] device_initial_probe+0x4a/0x60 [ 1969.402263][T26794] bus_probe_device+0x131/0x390 [ 1969.407109][T26794] device_add+0x25b5/0x2df0 [ 1969.411679][T26794] usb_new_device+0x23e5/0x2fb0 [ 1969.416516][T26794] hub_event+0x581d/0x72f0 [ 1969.420931][T26794] process_one_work+0x1572/0x1ef0 [ 1969.425954][T26794] worker_thread+0x111b/0x2460 [ 1969.430704][T26794] kthread+0x4b5/0x4f0 [ 1969.434758][T26794] ret_from_fork+0x35/0x40 [ 1969.439153][T26794] ===================================================== [ 1969.446067][T26794] Disabling lock debugging due to kernel taint [ 1969.452207][T26794] Kernel panic - not syncing: panic_on_warn set ... [ 1969.458791][T26794] CPU: 0 PID: 26794 Comm: kworker/0:0 Tainted: G B 5.4.0-rc3+ #0 [ 1969.467799][T26794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1969.477854][T26794] Workqueue: usb_hub_wq hub_event [ 1969.482884][T26794] Call Trace: [ 1969.486176][T26794] dump_stack+0x191/0x1f0 [ 1969.490496][T26794] panic+0x3c9/0xc1e [ 1969.494413][T26794] kmsan_report+0x2e8/0x2f0 [ 1969.498911][T26794] __msan_warning+0x73/0xf0 [ 1969.503410][T26794] read_sensor_register+0x4b7/0xd30 [ 1969.508604][T26794] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1969.514493][T26794] sd_init+0x2cf3/0x4530 [ 1969.518748][T26794] ? sd_config+0x270/0x270 [ 1969.523168][T26794] gspca_dev_probe2+0xe93/0x2230 [ 1969.528117][T26794] gspca_dev_probe+0x346/0x3b0 [ 1969.532885][T26794] sd_probe+0x8d/0xa0 [ 1969.536857][T26794] ? sd_s_ctrl+0xdd0/0xdd0 [ 1969.541264][T26794] usb_probe_interface+0xd19/0x1310 [ 1969.546459][T26794] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1969.552364][T26794] ? usb_register_driver+0x860/0x860 [ 1969.557640][T26794] really_probe+0xd91/0x1f90 [ 1969.562230][T26794] driver_probe_device+0x1ba/0x510 [ 1969.567349][T26794] __device_attach_driver+0x5b8/0x790 [ 1969.572726][T26794] bus_for_each_drv+0x28e/0x3b0 [ 1969.577567][T26794] ? deferred_probe_work_func+0x400/0x400 [ 1969.583279][T26794] __device_attach+0x489/0x750 [ 1969.588039][T26794] device_initial_probe+0x4a/0x60 [ 1969.593054][T26794] bus_probe_device+0x131/0x390 [ 1969.597921][T26794] device_add+0x25b5/0x2df0 [ 1969.602458][T26794] usb_set_configuration+0x309f/0x3710 [ 1969.607944][T26794] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1969.614197][T26794] generic_probe+0xe7/0x280 [ 1969.618694][T26794] ? usb_choose_configuration+0xae0/0xae0 [ 1969.624408][T26794] usb_probe_device+0x146/0x200 [ 1969.629251][T26794] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1969.635133][T26794] ? usb_register_device_driver+0x500/0x500 [ 1969.641014][T26794] really_probe+0xd91/0x1f90 [ 1969.645603][T26794] driver_probe_device+0x1ba/0x510 [ 1969.650709][T26794] __device_attach_driver+0x5b8/0x790 [ 1969.656179][T26794] bus_for_each_drv+0x28e/0x3b0 [ 1969.661021][T26794] ? deferred_probe_work_func+0x400/0x400 [ 1969.666737][T26794] __device_attach+0x489/0x750 [ 1969.671508][T26794] device_initial_probe+0x4a/0x60 [ 1969.676522][T26794] bus_probe_device+0x131/0x390 [ 1969.681375][T26794] device_add+0x25b5/0x2df0 [ 1969.685889][T26794] usb_new_device+0x23e5/0x2fb0 [ 1969.690745][T26794] hub_event+0x581d/0x72f0 [ 1969.695200][T26794] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1969.701081][T26794] ? led_work+0x720/0x720 [ 1969.705399][T26794] ? led_work+0x720/0x720 [ 1969.709730][T26794] process_one_work+0x1572/0x1ef0 [ 1969.714782][T26794] worker_thread+0x111b/0x2460 [ 1969.719556][T26794] kthread+0x4b5/0x4f0 [ 1969.723616][T26794] ? process_one_work+0x1ef0/0x1ef0 [ 1969.728809][T26794] ? kthread_blkcg+0xf0/0xf0 [ 1969.733481][T26794] ret_from_fork+0x35/0x40 [ 1969.739664][T26794] Kernel Offset: disabled [ 1969.744008][T26794] Rebooting in 86400 seconds..