[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 123.662094][ T8169] sshd (8169) used greatest stack depth: 4048 bytes left Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. 2020/09/11 12:00:48 fuzzer started 2020/09/11 12:00:49 dialing manager at 10.128.0.26:36949 2020/09/11 12:00:49 syscalls: 3168 2020/09/11 12:00:49 code coverage: enabled 2020/09/11 12:00:49 comparison tracing: enabled 2020/09/11 12:00:49 extra coverage: enabled 2020/09/11 12:00:49 setuid sandbox: enabled 2020/09/11 12:00:49 namespace sandbox: enabled 2020/09/11 12:00:49 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/11 12:00:49 fault injection: enabled 2020/09/11 12:00:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/11 12:00:49 net packet injection: enabled 2020/09/11 12:00:49 net device setup: enabled 2020/09/11 12:00:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/11 12:00:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/11 12:00:49 USB emulation: enabled 2020/09/11 12:00:49 hci packet injection: enabled 12:05:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x891e, &(0x7f0000000000)={'sit0\x00', 0x0}) [ 445.803238][ T8497] IPVS: ftp: loaded support on port[0] = 21 [ 446.286192][ T8497] chnl_net:caif_netlink_parms(): no params data found [ 446.467652][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.475126][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.486144][ T8497] device bridge_slave_0 entered promiscuous mode [ 446.531198][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.538359][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.548923][ T8497] device bridge_slave_1 entered promiscuous mode [ 446.601398][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.618661][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.668462][ T8497] team0: Port device team_slave_0 added [ 446.682655][ T8497] team0: Port device team_slave_1 added [ 446.727641][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.734886][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.761274][ T8497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.778700][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.786078][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.813600][ T8497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.885825][ T8497] device hsr_slave_0 entered promiscuous mode [ 446.896582][ T8497] device hsr_slave_1 entered promiscuous mode [ 447.195555][ T8497] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 447.214604][ T8497] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 447.278092][ T8497] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.311260][ T8497] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 447.630760][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.638469][ T28] Bluetooth: hci0: command 0x0409 tx timeout [ 447.676536][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.686013][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.714664][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.742714][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 447.752811][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.762456][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.769747][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.810262][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.820283][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.830255][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.839817][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.847072][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.870897][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.906611][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.930034][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.940451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.973563][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.983921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.994736][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 448.005856][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 448.015745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.047002][ T8497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.060862][ T8497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.087813][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 448.097737][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.142808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.150783][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.201234][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.270981][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.282942][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.355636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 448.365752][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.392426][ T8497] device veth0_vlan entered promiscuous mode [ 448.403195][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.412561][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.450192][ T8497] device veth1_vlan entered promiscuous mode [ 448.566260][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 448.576165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 448.585857][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 448.596477][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.620103][ T8497] device veth0_macvtap entered promiscuous mode [ 448.644816][ T8497] device veth1_macvtap entered promiscuous mode [ 448.714257][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.723366][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 448.733220][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 448.742817][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.752996][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.785551][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.793364][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.803688][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:05:46 executing program 0: setuid(0xee01) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCADDRT(r0, 0x894c, 0x0) 12:05:46 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14}, 0x14}}, 0x404c810) 12:05:46 executing program 0: socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0, 0x0) [ 449.710075][ T28] Bluetooth: hci0: command 0x041b tx timeout 12:05:47 executing program 0: r0 = socket(0x21, 0x2, 0x2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xf0ff7f) 12:05:47 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0xf0ff7f) 12:05:47 executing program 0: uname(&(0x7f0000000000)=""/171) socket$isdn_base(0x22, 0x3, 0x0) 12:05:48 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000008ac056412400001020301090224000101000000090400000003010200092100000001220000090581030000000000"], 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000000180)={&(0x7f0000000100)="1626b4c6bee8d0095e0e696bb34f8ba0d68e5dcd63f4f29fbf2e8354707b1e1422fd50ba05199aa923660b9fdde1236a8c55faea609f60692a8ca60924fb141f5a3007cf89e672a94be98689c6131e838737146191634cb9738e7bb180", 0x5d}) io_getevents(r0, 0x100000001, 0x1, &(0x7f0000000080)=[{}], 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={&(0x7f00000001c0)=[0x7fff], 0x1, 0x3, 0x6, 0x3, 0x8001, 0x7, 0x59a, {0x1, 0x7fff, 0x3, 0xfffd, 0xc17, 0x3f, 0x0, 0x6, 0x4209, 0x6, 0x4, 0xb15, 0x1, 0x7, "2b159ffd70b8f35efd2bb0ae573ad768249c79d6457f416af4b2fcc4463fa0e7"}}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x8, 0x5, 0x4}) [ 451.719906][ T4898] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 451.791623][ T28] Bluetooth: hci0: command 0x040f tx timeout [ 451.959316][ T4898] usb 1-1: Using ep0 maxpacket: 8 [ 452.090717][ T4898] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 452.260193][ T4898] usb 1-1: New USB device found, idVendor=05ac, idProduct=1264, bcdDevice= 0.40 [ 452.269528][ T4898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.277595][ T4898] usb 1-1: Product: syz [ 452.281995][ T4898] usb 1-1: Manufacturer: syz [ 452.286667][ T4898] usb 1-1: SerialNumber: syz [ 452.388549][ T4898] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 452.587650][ T4898] usb 1-1: USB disconnect, device number 2 12:05:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x800) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x15, 0x7f, &(0x7f0000000080)="5205ae2e532a491b8a47f5f0820fb7fe81a3de551ea45ed27972874805772b6305c90e91de4244399e6e367b6fa771d3df46e95b6d2bd632fc5ad92ab4f205750330dcc4867a32609f9b3da119adc64ae1518302ad59d46b4eaaadd358da6381191d314165055f81fea9987a5858ad098a964f1ff7e9d1ff461ffdf6f2a542"}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7fc2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x3}, 0x8) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_STATUS={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) tkill(r3, 0x3e) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x2}}}, 0x84) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000004c0)={0x3, 0x6, 0x8, 0x80000000, 0x5, 0x81}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000500)={0x7fffffff, 0x5, 0x6, 0xff, 0x10, "13751d10b46b829e1c3026d8e53c801c468396"}) syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x4, 0x2, {{0xd, 0x4, 0x2, 0x6, 0x34, 0x68, 0x0, 0x4, 0x2f, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x19, 0x3, 0x8, [{@remote, 0x2}, {@local, 0x54d0e3db}]}, @ra={0x94, 0x4}, @end]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@generic={0x5, 0x4, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x7, 0x1, 0x31783bda04eb9374, 0x8, 0x4, 0x30, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0xb, 0xa, 0x8, 0x30, 0xffffffffffffffff}, @exit]}, &(0x7f0000000600)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xc, [], r4, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x3, 0x80, 0xffff}, 0x10, 0x1bbd}, 0x78) ptrace$cont(0x7, r3, 0x100, 0x5) syz_open_dev$sndctrl(&(0x7f0000000800)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x404300) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000880)={&(0x7f0000000840)=[0xfffffffe, 0x1, 0x80000000, 0x7, 0x81, 0x1, 0x3f], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000008c0), &(0x7f0000000900)=0x8) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000a00)={0xffffffffffffffff, r0, 0x1f, 0x64, &(0x7f0000000980)="2c9d79746a4ac610eae43e37dcf7842b5348d3e6af649079752019acdccc935f6880d2e88f62f3d211fd0bbb7d5769b449fc549df8059414ca09e65e8f6d699759901ebfd83c4597d0c83c171da7325f820e57fea3b320ca3417b0bf9cc575f7d95024a9", 0x3, 0x1, 0x8000, 0xbb94, 0x1, 0x0, 0x0, 'syz0\x00'}) [ 453.389348][ T4898] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 453.631349][ T4898] usb 1-1: Using ep0 maxpacket: 8 [ 453.749530][ T4898] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 453.869698][ T28] Bluetooth: hci0: command 0x0419 tx timeout [ 453.930813][ T4898] usb 1-1: New USB device found, idVendor=05ac, idProduct=1264, bcdDevice= 0.40 [ 453.940093][ T4898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.948156][ T4898] usb 1-1: Product: syz [ 453.953316][ T4898] usb 1-1: Manufacturer: syz [ 453.957990][ T4898] usb 1-1: SerialNumber: syz [ 454.048458][ T4898] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 454.250276][ T28] usb 1-1: USB disconnect, device number 3 12:05:51 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000404) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="3401000010000507ea351e785400090000000000", @ANYRES32, @ANYBLOB="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"], 0x134}}, 0x0) 12:05:51 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffa16965670070080045000038000000000001907864010102ac1414aa0b009078030000004500000000000000002f0007ac1414bbac1414aa000086ddffff000058120064858d204181d8868191d187812c04213df6f5d581b1f88720888a28e991c9f9bcf0"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0xfffffffffffffffc) read$dsp(r1, &(0x7f00000001c0)=""/245, 0xf5) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) socket$qrtr(0x2a, 0x2, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) [ 455.029459][ T8783] IPVS: ftp: loaded support on port[0] = 21 12:05:51 executing program 0: getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) r0 = gettid() tkill(r0, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r0) syz_usb_connect(0x1, 0xf2, &(0x7f0000000040)=ANY=[], 0x0) eventfd(0x2) 12:05:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x3, {0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x3, 0x9, 0x7, 0x80000001, 0x10001}) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000000)={0xf75b, 0x1, [0x6, 0x6, 0xda, 0x1, 0x8], 0x9}) [ 455.698816][ T8783] chnl_net:caif_netlink_parms(): no params data found 12:05:52 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x600, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000340)={0x8, [0x81, 0x5, 0xf9b], [{0x7, 0x800, 0x0, 0x0, 0x0, 0x1}, {0x3, 0xd9, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x9365, 0x1, 0x0, 0x1, 0x1}, {0x79a, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x9, 0x1, 0x1, 0x1}, {0x1f, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x9521, 0x9d5, 0x1, 0x1, 0x1, 0x1}, {0xfffffffe, 0x3e5, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x1004, 0x1, 0x1, 0x1, 0x1}, {0xe0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x0, 0x1}, {0x5, 0x10001, 0x0, 0x1}], 0x5}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f00000005c0)=0x11da) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r7, 0xc008ae09, &(0x7f00000001c0)=""/214) splice(r5, 0x0, r7, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') getsockopt(r6, 0x2, 0x0, &(0x7f0000000540)=""/49, &(0x7f0000000580)=0x31) r8 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x628, 0x50400) write$proc_mixer(r8, &(0x7f0000000440)=[{'RADIO', @void}, {'IMIX', @val={' \'', 'Line Capture', '\' '}}, {'IMIX', @val={' \'', 'Master Capture Switch', '\' '}}, {'CD', @val={' \'', 'Synth Capture Switch', '\' '}}, {'LINE2', @val={' \'', 'Master Playback', '\' '}}, {'TREBLE', @val={' \'', 'Capture Volume', '\' '}}], 0xea) [ 456.021105][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.028366][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.038096][ T8783] device bridge_slave_0 entered promiscuous mode [ 456.053028][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.060983][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.070537][ T8783] device bridge_slave_1 entered promiscuous mode [ 456.123470][ T8783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.141320][ T8783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.198285][ T8783] team0: Port device team_slave_0 added [ 456.215226][ T8783] team0: Port device team_slave_1 added [ 456.315364][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.323619][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.351188][ T8783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.370572][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.377634][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.404008][ T8783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 12:05:53 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000200)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000080016800400018004001400"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) fsmount(r6, 0x0, 0x70) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x4000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000001fddbdf254c0000000c001d8005000100aa0000006c"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c020000", @ANYRES16=r9, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000001) [ 456.477408][ T8783] device hsr_slave_0 entered promiscuous mode [ 456.518965][ T8783] device hsr_slave_1 entered promiscuous mode [ 456.539983][ T8783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.547597][ T8783] Cannot create hsr debugfs directory [ 456.833716][ T28] Bluetooth: hci1: command 0x0409 tx timeout 12:05:53 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000200)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000080016800400018004001400"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) fsmount(r6, 0x0, 0x70) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x4000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000001fddbdf254c0000000c001d8005000100aa0000006c"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c020000", @ANYRES16=r9, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000001) 12:05:54 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000200)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000080016800400018004001400"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) fsmount(r6, 0x0, 0x70) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x4000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000001fddbdf254c0000000c001d8005000100aa0000006c"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c020000", @ANYRES16=r9, @ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000001) [ 457.214040][ T8783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.260680][ T8783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.311651][ T8783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.341283][ T8783] netdevsim netdevsim1 netdevsim3: renamed from eth3 12:05:54 executing program 0: syz_usb_connect(0x5, 0xe8c, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xcb, 0x6f, 0x6, 0x0, 0x1410, 0xa011, 0x44ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7a, 0x3, 0x48, 0xff, 0x10, 0x81, [{{0x9, 0x4, 0x32, 0x0, 0xf, 0x56, 0x43, 0xf7, 0x3, [@generic={0xf5, 0x31, "f1bfab7a94bbcc4de42e9c088d3758f7c4e36eb3ceaa0ea1e0d21d9a0f774a9b3ce2148ac7590f7dd20cf229763951a00564434a4d54ebff451fe7266b93639f5e6d89437601b833b5021c59cca8ea8d02422ce667d258e17a73acdfb7a4111139ebbc9f420727a41cdc480073b7f2f0ddfaa4a8578e9e57b5f62d908442c26de59d4176fae7324ab28eda668ed6f494e62242fce64be25a070ee3f4f7381b3dd1631064bc89ae469e0e249e3d16e526c3e60064a3a96ed080db96c2f642ec6d021c5f85c9391b7ec931387d6c7e3c5d760e0dfa8254749c367362acab358143ef2a83eb3e0c21155b715a673af169a90f3902"}, @generic={0xef, 0xd, "49505e7046cc2d2abe15e23d9353fe043ce30c7b900568c5b4a1b4c99bcdf26d7238eac5fa803668d54876510cf4a09295d51590dfceda805a91575e6bd11bc98be45f778f19d49c0d0ea294a40b960403d3c0b05e2711ae55af5a777dca87d49c5802e38eee82744eac50deb03f0b19e982eeede70f440e011c689c6a06a3d4f6515c7a7b583f4aebdee1f1d4a676ee25b4f28fa2cfc468bd04c1a19210c55303014cac8828c3ca5a7e7c0533efccef0f0896ebbbe5fedea52bc3fa6c7a779cf1b84681142bc81976cd46003390cab074a721b50f3fb05b81ec75024c156e681d47043cef72d2fc85740ab439"}], [{{0x9, 0x5, 0xd, 0x10, 0x20, 0xe8, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x3ff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0xfe, 0x1, 0x7, [@generic={0x30, 0xce2933f9d934d3d, "db9630af6fb85be95a0e0b3f702f4b2a3b503329e73182f0e6c3aa20081dc296463ecea87496a11ed28c42107ca8"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0xfe, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x85, 0x20}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0xbb, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8a, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0x6294}]}}, {{0x9, 0x5, 0x80, 0x2, 0x400, 0x3, 0x1f, 0x81}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x7, 0x1, 0x1f, [@generic={0xec, 0x2, "3968acc73f99ea564b8a87e26cd8665f1bd83a28ba0961b37d7eb442d0221818c895ecf9ab6e4335e46e9085a1929a2dfdaf1aa4d88c5d9b70c19a8221db24049b0ae3862df7da17754e19dac84c99ab7bdeda327eb94ac6e55f16f37a3ef2ac57044a7e602dba97b88a4084b1aaa83115537ca9993ad36eeccdf89171196976b9febeaeb739353bbfdd69c877238f7ac8313fa356810b879d8bc0862e95a101b669b5a4b98a49be6eba1dbac86b23258e9e59bb5051f640442c18e40e27460b5d5f153e2b180ab1d0792ef3d644a1c4c1e5db0f4d5fd68a5588377dda26356d992962ecfdf4be786724"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x3f, 0x4, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x2}]}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x3, 0x9, 0x8, [@generic={0xdd, 0xa, "bea50bf3b889f7a27af506ce70351b5ddbf02b9d7ea369c728fce70cf13cac0fbcbfe3784762b85bd7711cdb5720c0f546a3eaf64e96b21255bdd15d06c1f3db74ae98dc2a22fc1726c9a1589604320bc639e5b00b948b8b00be33e191e7266dca9c281d37ec2567839c1173ca0afb31e9e7fc1ecccbda398bffe570b835678768ea6b67a3052a28f2fb1a322d33d1ca729d26ba331bb667f4fce90c6046fd984f9fc11e4f8e178f0c3b24bc5630f134de31f4ce5a143cc78399505dd5c12a9c82457eecf6adb448eba2c258af5f5f672f5d581bc1c8983beda58a"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x3f}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x0, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x6}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x77, 0x7f}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x1f, 0x6, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x85, 0x6, 0x4}, @generic={0xcc, 0x21, "8c069c7332da641e2d3225cc3db0c60f722f3ce781cebae68d47ac5ae1f1776373d3f684c3cae0800de20ecb8fdee465ee69a47b95076f993d98029ddb77447657a3637921ded66705af3cc2c9c1a524e8856f6a03869d28a7d91d0593a4cbd5db169930886cc95772f60ab4e9727fead4630efe527104ca932ec19b7ff4aa9ede55cdfa6b8980e28fac18745261f6b27695346ce34c816d51100b1e809e5c085ec8acd91d6c106775f9fc08538589e928d55043ab49c036a8f5b2d8a959101e87fb004ed17bb696f781"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x6, 0x2e, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}, @generic={0x98, 0xb, "7a0ea79d6385668e5106f29c213c1130ffbdda23510ec30cf2ab7a63378f67290de85156f70012b75513da5f5f929fc15ffc56e0667e9a44331747cfd0560caaa5bdf96bb36fc6366ea5eae19c11d77f2f88d2d350110f83bf611044e607d5fe819392d94d64304ef7c783fcc9a970ae6d50ef62a8cfcbccde85f5c569c05abbb29b5da68decde21fbe72407f6f9179592a676256c80"}]}}, {{0x9, 0x5, 0x8f, 0x10, 0x40, 0x0, 0x5, 0x4, [@generic={0x6, 0x11, "52f39348"}, @generic={0xda, 0x23, "1d1540eb17c4dde6e463f6dd5b064b926a53e55b249dd23287809cd27013cd1de6d04d99dd0bc3d3a02f1772583591959af2e296c996fc1bff5bc49f4ebe2d063394fa0b8927a81275d2bc9c65a20df3e0929a0b277ef064cf8e3dcf593dd844be013908086fd7b896109ae3a6ddbb1e4f5a626dd3032c797f263a3c8fc062d2e176e838840a5994a7ff0576de4d338671837422ee56cc3b792021f9bf12406e2af6cfc02e33784dd1fd45b79b5babc2eae32f0e3cefc222349a3f8f89b9993f5d7bab59733974680d7cd5a943c56dcbc4ee60cd88b76598"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x1, 0x8, 0x8, [@generic={0xf4, 0xe, "b625853ee8a186f788969d64be7d132a6a760e1dadae6fdb93ab7458fa105e53367301fbdba4a89ac91c9235420ae399fc7998dbc49856060ea69edd8855840a4824c94b028ea1b422eee2e59a12b3b1f6dc5c113373a8ab8cd4d7993e04492115d647246990cab3f922184178f08f2dd1a57bc8745d40d555206148315242ce01275b22c2fba7b820491f2c4e12d317e2aba0cae0c7546e02b3f96984c734b7f90ec883d0f9aee9a912db4bfb3f1e92712033b114251ace8a886e828d30ce2e377bdffcce72f291ba393bb9e2adbb8de70a05c6f85f8320fa8c82d9a2c2463c5e8ee42c02267d10abf536cb094af77233a0"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xf03c}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x5, 0x4, 0x4}}]}}, {{0x9, 0x4, 0xba, 0x8, 0xa, 0xff, 0xff, 0xff, 0x5, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x4, 0x40, 'wz'}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x5e, 0x1, 0x8, 0x81, "7624e9", '2Mo'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5f, 0x6, 0xfe, "23effd6c0c04f2"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x0, 0x9, 'i', "12"}]}], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0x2, 0x6c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x19}, @generic={0xc3, 0xf, "41d56c325f88970084cee48d9845c317932d5f9fad6da09603da05f7f3e2d1102730c7657c17174861ce7501e51572b095072cbd3f792d403947f5e6a76073700e3f2e37270f12a3ab063a16b9ec9ee040733f3d96a0a625399ae6f46b6b8b506b9835df033484b563c7919b9e37932e9f532a7417ae53c17721f1ff538b0d57f3b7bde557fa37246a60d1e5acd5781f2019ee0ef21895c43a2c8a89c0f8447389627fda27ed9852b7c1cc86c1900e3b96afbf821f550db8887d9badc8dc1b070b"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x80, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x7f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8000}]}}, {{0x9, 0x5, 0x4, 0xc, 0x0, 0x7f, 0x1, 0x3, [@generic={0x100, 0xc, "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"}, @generic={0x9d, 0x7, "68cca8e442bdb04fb5d8eea0d924aec4e38299bb9cfb8fdb6cb3db836b7e5461f7f05ebca25adf4953cf1234dda76a25cbb9f6a6a38c7d6e6b8924c9f2fee06d8fab53cbd79b02f4095dc78f743443dbe5a024b0c7116378cf9a4d652312fe5f39dd711d7589380cfb48d9b8d4e3709d991045b0f17710df6e123b31f84098ec29f70b0f36fe6a72e1e1cf059071679ffa7b8c19fcbf354b468bc2"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x1f, 0x20, 0x64}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x0, 0x2a, 0x8}}, {{0x9, 0x5, 0xb, 0xc, 0x0, 0x2, 0x1f, 0x3f}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x2, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x20}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x6d, 0x80}}, {{0x9, 0x5, 0x0, 0x13, 0x10, 0x9, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x80, 0xa, 0x83, [@generic={0x4c, 0x1, "ec665b455f325e9393f62bd9ace586d77d8c83e53fd33f31b32a76c5287b6625b04b4c6626100942ba4aefd182b285c7cfe3e72c7edd4e491348e747b3a41137674440fee8720ecdc119"}]}}]}}, {{0x9, 0x4, 0x92, 0x6, 0xc, 0x76, 0x12, 0x2c, 0x0, [], [{{0x9, 0x5, 0x5, 0x19, 0x20, 0x1, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x2}, @generic={0x4c, 0x22, "2c07bcfd9c17860acfb6f04522da3c293c9b98ac6d0a6c47f5ca40455b4c10e6f1c23f056f02f4a826741fd814dab919f4ca7cfe9fc81dc25321ed1b5af1e4d48fc641b5dd65e9630b93"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x2, 0x4}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x0, 0x1, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x8, 0x40, 0x6}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0xec, 0x0, [@generic={0x5, 0x1c, "4564d1"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x2, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x5}, @generic={0x95, 0xb, "cc2d222fdbb21908be1f6ad43eff4f58f6781dbd5ed4d50e18fe5bc11345585dbe8783c7619642ad6d2b95ed057d93430e4d3e7c22beea3f1ab95d3da6aa53c93ff586289ed735227dd73fbeec1ce8e86509687115ec5ea244eab0ff0a1f699e9315dbc7470c7a2712eb931980fac15d285f0ce7227aa96597ed4eb3600175604ac4a7a33e23f4c3b4217a74be6a48f463064f"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x6, 0x6, 0x7}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x8, 0x1, 0x4, [@generic={0x9f, 0xb, "fe095ec362a37ee106b9257d5c899090b137d34c87e31b4b0ce97bc486ca61d31db419fa24053b903851dc360b3963e69035c79695ce7209ba68c2383fd069fe7b33ecae3237941167811e90155fce6f7b0e866ac8b9555649ba5d42b540f9ac2f8cc2eddb5c0f115efd390b689e19e97485290b7174868fe04ae27facf9063c72951fa755a59433bf955e498ea20d2e0a404591aeb0850b104e57f8f4"}, @generic={0xf6, 0x11, "f5199972021825dcecf6a8045f0a110682ef91ba3ca97b330565a9a0190ade80519df9765531f2c30ed205d23ae3de22129f89504223518bf281f44f255c2b5fad246f238a5c938e36e49c0f485687ed62ff92525cdd0edf54b9e5deef2f5e282bd7c26f8efdd5960c4713ed4c84de6b2a4e3b578ab7f51dc6711c20bd22a8a75e2a6d4d38f9468aaa18f778bda5dc568199044492bc7ae7742bbc17d7eefed59f4b8e1d6c555e79e8c7880e6877816f5ac3a01cb78d27cac9d66d4f5bbb60d4a47680474c617e1523ad193aeff73b060aee50c8980b2abc612b973f655f57c0cdf3d36a94c5fa596fae52522a699d49ddfb03a6"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x6, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xf9a}]}}, {{0x9, 0x5, 0xb, 0x10, 0xe8395bf6ba082bb4, 0x0, 0x7f, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x60, 0x865}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x1, 0x0, 0xe1}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0x5, 0x5}}]}}]}}]}}, 0x0) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) [ 457.923276][ T8783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.989655][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.998812][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 458.028902][ T8783] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.057952][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 458.068083][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 458.079639][ T4898] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.086872][ T4898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.130994][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 458.162426][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.172480][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 458.182596][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 458.192771][ T4898] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.200160][ T4898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.209443][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.220582][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.231894][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 458.242648][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.258977][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.285803][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 458.297153][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.324571][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 458.334569][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.374519][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 458.384860][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.411075][ T8783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.481603][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.489951][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.510895][ T28] usb 1-1: device descriptor read/64, error 18 [ 458.540847][ T8783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.620185][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 458.630662][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 458.699593][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 458.709728][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 458.736826][ T8783] device veth0_vlan entered promiscuous mode [ 458.746595][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 458.756027][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 458.796661][ T8783] device veth1_vlan entered promiscuous mode [ 458.887428][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 458.896984][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 458.906600][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 458.917592][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.928230][ T28] usb 1-1: device descriptor read/64, error 18 [ 458.948795][ T8783] device veth0_macvtap entered promiscuous mode [ 458.973669][ T8783] device veth1_macvtap entered promiscuous mode [ 458.984614][ T4898] Bluetooth: hci1: command 0x041b tx timeout [ 459.042972][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.054238][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.068341][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.076543][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 459.086514][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 459.096046][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 459.106211][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 459.161679][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 459.172205][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.186586][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.194745][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 459.205165][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 459.270967][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 459.620635][ T28] usb 1-1: device descriptor read/64, error 18 12:05:56 executing program 1: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x16c0, 0x75e1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x148}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x1}) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00('], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 460.009665][ T28] usb 1-1: device descriptor read/64, error 18 [ 460.139604][ T28] usb usb1-port1: attempt power cycle [ 460.520101][ T8712] usb 2-1: new full-speed USB device number 2 using dummy_hcd 12:05:57 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7d, 0x92, 0x7f, 0x40, 0x1209, 0x2323, 0xc348, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x72, 0x45, 0x8a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)={0x60}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = gettid() tkill(r1, 0x10) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000000)={0x0, 0x0, 0x1, "9b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 460.850432][ T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 460.890179][ T8712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 460.901385][ T8712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.912513][ T8712] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 460.921840][ T8712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.973990][ T8712] usb 2-1: config 0 descriptor?? [ 461.071417][ T4898] Bluetooth: hci1: command 0x040f tx timeout [ 461.332113][ T28] usb 1-1: device not accepting address 6, error -71 [ 461.496271][ T8712] xinmo 0003:16C0:75E1.0001: unknown main item tag 0x0 [ 461.544408][ T8712] xinmo 0003:16C0:75E1.0001: hidraw0: USB HID v0.00 Device [HID 16c0:75e1] on usb-dummy_hcd.1-1/input0 [ 461.696988][ T8712] usb 2-1: USB disconnect, device number 2 [ 461.719598][ T28] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 461.949708][ T28] usb 1-1: New USB device found, idVendor=1209, idProduct=2323, bcdDevice=c3.48 [ 461.959206][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.975368][ T28] usb 1-1: config 0 descriptor?? [ 462.459848][ T28] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 462.510477][ T4898] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 462.742002][ T28] gs_usb 1-1:0.0: Couldn't get bit timing const for channel (err=-71) [ 462.750748][ T28] gs_usb: probe of 1-1:0.0 failed with error -71 [ 462.831060][ T28] usb 1-1: USB disconnect, device number 7 12:05:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x60002) sendfile(r2, r0, &(0x7f0000000040)=0x7fff, 0x8) getsockname$qrtr(r0, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sched_yield() write$binfmt_script(r2, &(0x7f0000000580)={'#! ', './file0', [{0x20, '*){'}, {0x20, '/dev/qrtr-tun\x00\x9a\xc9\x02\x1bJ\x91\x91\xf9\xc0\xd3\x18\xacz\xe5\x1de\x17\xe3\xf7}2K\xcdL\xe4j\xff\xab\x83\xee\x1d\b\x13t\x80\x10\xdb\x19\x89g\naYp\x19!\xe9\xfby[EN\x8b<\x9a\xae\xc1\xbcx\xc3\x01O\x9dXcp<\xb6\x1dzm\xae0\xda/&a\xaa&^\xed\xca\x99\xe0w\xec\x82\xfd\xadL\xd4\xf7\xad\xf6\xf3M4Q\xc2\x88\xb2\xb2\xbc\xf8\x8c\xda\xb5\xae\x14Z\xa3\x91H\xca\xba\xe6\x04\xd9\xd9\x8cw\x1e\x91\v\xb2\x1do\xb91Q\x026\x90\xb8\xa8\x89\xc7\xe4&=Z83\xcd\xa6zs\xe3\xe0\x1a\x12\x149e\x92\x86\x81084\x87\xefsw\xc4\x85\xdaQ\'!X\x196\xb4u 9n,t\x8f\xf5\xbf'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '},\x8e#/{\xcf.:[$^'}], 0xa, "0726eea4556b2cc112cf623130a633baa290e319a4b6fb07472c5f3ceeae5d42590991c13532c26c7b96d2723f037c2ac0c475643b35d0623e59f40c0d23576f98aa58bbd6a89ae835a91d1f336939eb32ef02b4383c9f33064515891c8a5d95d5500571578dafd6acaa219c97af4b3f830d3ae1b2ddd52243dd07ff60d6f00b6fecc2408a81924d69ff4831875b700613f632ae1bcb8bf30b9a3f70a1360bd6c3ce4076809805b19cc4fdaf74175e658e2d68a4fbf81e8687adbca2c9ced520d20793b6ca22ae1c0aa924138ac0cb2b3c2c4a9c3c5f96"}, 0x237) r4 = socket(0xa, 0x1, 0x0) close(r4) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80e, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x7b, &(0x7f0000000100)={r6}, 0x8) r7 = socket(0xa, 0x1, 0x0) close(r7) sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x101, 0x4, 0x80000000, 0xffff, r6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x820a, 0x151a, 0x400}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0xfff, 0x9, 0x0, 0xffffff59, 0x60ee, 0x2, 0x25, 0x8, r3}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x4, 0x10001, 0x7ff, 0x401, 0x50f4, 0x7, 0x747e1d9c, r3}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0x128}], 0x1, 0x4000080) [ 462.892397][ T4898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.903611][ T4898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.913710][ T4898] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 462.922963][ T4898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.968879][ T4898] usb 2-1: config 0 descriptor?? [ 463.150641][ T28] Bluetooth: hci1: command 0x0419 tx timeout 12:06:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa2274004700001c0000000000339078ac141400ac1e00018608247901030000000065580000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800656b000000000026d576ecd50a2c09f00cebf5efde807281f9c7516178551fabab36efdfc66a820fb8482a54dfe28b2cdbbdba288c00fad6eaefb7c9da2b77e80000"], 0x0) [ 463.359809][ T4898] usbhid 2-1:0.0: can't add hid device: -71 [ 463.366238][ T4898] usbhid: probe of 2-1:0.0 failed with error -71 [ 463.432693][ T4898] usb 2-1: USB disconnect, device number 3 12:06:00 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000340)=""/103) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae04}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 463.895925][ T9090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:06:00 executing program 0: r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x60002) sendfile(r2, r0, &(0x7f0000000040)=0x7fff, 0x8) getsockname$qrtr(r0, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sched_yield() write$binfmt_script(r2, &(0x7f0000000580)={'#! ', './file0', [{0x20, '*){'}, {0x20, '/dev/qrtr-tun\x00\x9a\xc9\x02\x1bJ\x91\x91\xf9\xc0\xd3\x18\xacz\xe5\x1de\x17\xe3\xf7}2K\xcdL\xe4j\xff\xab\x83\xee\x1d\b\x13t\x80\x10\xdb\x19\x89g\naYp\x19!\xe9\xfby[EN\x8b<\x9a\xae\xc1\xbcx\xc3\x01O\x9dXcp<\xb6\x1dzm\xae0\xda/&a\xaa&^\xed\xca\x99\xe0w\xec\x82\xfd\xadL\xd4\xf7\xad\xf6\xf3M4Q\xc2\x88\xb2\xb2\xbc\xf8\x8c\xda\xb5\xae\x14Z\xa3\x91H\xca\xba\xe6\x04\xd9\xd9\x8cw\x1e\x91\v\xb2\x1do\xb91Q\x026\x90\xb8\xa8\x89\xc7\xe4&=Z83\xcd\xa6zs\xe3\xe0\x1a\x12\x149e\x92\x86\x81084\x87\xefsw\xc4\x85\xdaQ\'!X\x196\xb4u 9n,t\x8f\xf5\xbf'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '},\x8e#/{\xcf.:[$^'}], 0xa, "0726eea4556b2cc112cf623130a633baa290e319a4b6fb07472c5f3ceeae5d42590991c13532c26c7b96d2723f037c2ac0c475643b35d0623e59f40c0d23576f98aa58bbd6a89ae835a91d1f336939eb32ef02b4383c9f33064515891c8a5d95d5500571578dafd6acaa219c97af4b3f830d3ae1b2ddd52243dd07ff60d6f00b6fecc2408a81924d69ff4831875b700613f632ae1bcb8bf30b9a3f70a1360bd6c3ce4076809805b19cc4fdaf74175e658e2d68a4fbf81e8687adbca2c9ced520d20793b6ca22ae1c0aa924138ac0cb2b3c2c4a9c3c5f96"}, 0x237) r4 = socket(0xa, 0x1, 0x0) close(r4) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80e, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x7b, &(0x7f0000000100)={r6}, 0x8) r7 = socket(0xa, 0x1, 0x0) close(r7) sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0x101, 0x4, 0x80000000, 0xffff, r6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x820a, 0x151a, 0x400}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0xfff, 0x9, 0x0, 0xffffff59, 0x60ee, 0x2, 0x25, 0x8, r3}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x4, 0x10001, 0x7ff, 0x401, 0x50f4, 0x7, 0x747e1d9c, r3}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0x128}], 0x1, 0x4000080) [ 464.021094][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:06:01 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x400c005) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={r4, 0xffffc942}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007c4a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) r5 = creat(&(0x7f0000000200)='./file0\x00', 0x2) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f0000000300)=""/11) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004044}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="900000002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000400000009000100666c6f7700000000600002005c000b80500002801800010000000100000000000000000000000000000000003400020000000900000000ec070000000a000000080001000000000004000500050003008c0000000b000200706f6c696379000008000100c0"], 0x90}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000000080)={'vcan0\x00', 0x1}) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec04, 0x0) 12:06:01 executing program 1: syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xe9, 0x15, 0x53, 0x10, 0x187f, 0x10, 0x714, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb2, 0x0, 0x1, 0x58, 0x66, 0x8a, 0x0, [], [{{0x9, 0x5, 0x3, 0x3, 0x0, 0x2}}]}}]}}]}}, 0x0) [ 464.829891][ T4865] usb 2-1: new low-speed USB device number 4 using dummy_hcd 12:06:01 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000001200)=0x5, 0x4) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000080)='d', 0x1}], 0x1}}], 0x1, 0x4000040) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r4, 0x10d, 0xbe, &(0x7f0000000140), &(0x7f00000000c0)=0x4) [ 465.075379][ T4865] usb 2-1: Invalid ep0 maxpacket: 16 [ 465.230187][ T4865] usb 2-1: new low-speed USB device number 5 using dummy_hcd 12:06:02 executing program 0: syz_usb_connect(0x0, 0x3f4, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0xbe, 0x8f, 0x61, 0x40, 0x1199, 0x6852, 0xe972, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x3e2, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3f, 0x0, 0xc, 0x4b, 0x4f, 0x1, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0xff, 0x1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}, @generic={0x73, 0x23, "f57527f8dc7f9794e7c0c2c777a8c603af6d1f09b38cd826bd8e8ed0f281e924e9669500989f3c2cafe2a9c45433c492bfafd3b4a31d4cbe128e5ac9d6869f2539d331922a7a2b5d1bde929c0782ee095903e6ebb307c7f89b04a187bc3e746a8f2b82068265f0764d3c3cbca3d8344a32"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x2, 0xfb, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x93, 0x8, 0x81, [@generic={0x16, 0x10, "3178b3b354d8ccfadd47994f0548ac576155eb95"}, @generic={0x5, 0x22, "cea0a6"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x8f, 0xc0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7}, @generic={0x63, 0x23, "2839d0824fdda6f0d93a26308b7dae7c81a08f268cb01566a947e0efe09007823991aeb14bbc3ef2d76ffa565c1ca8344ed6a7f814653b244e84f3997ecd419b0b797661f58aab612ea09a5ff4820b26b91c8dbd5409c746ea3b8900a6600620b1"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0xfc, 0x3, [@generic={0x89, 0x7, "df38141b68402506e2a9fa8af93550a71f724b91db253f0353a2b9101e0d52bd6b5bcd9dbfb802e3635a629487d11b9555f93eefbb953df96010d3ce6c89878979a143d1a1ac663a0049a95f1260d143ee18ff1b82ad8d1cd0b11f1ca4bc703a2ca8afa3225577f5bb53bd66aa7c8ab09f788f1d7bcdb0c9b77d04cfff556e117da023eb1fc84f"}, @generic={0x17, 0x3, "94494d1b9289705263b254ac6eb0d62c4d87b52bc2"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x36, 0x9, 0xca}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0xb8, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf3, 0x92}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x81, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x81}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0x3f, 0x1, 0x20}}, {{0x9, 0x5, 0xb, 0x10, 0x7146e5ea1f1d87fd, 0x0, 0x9, 0x0, [@generic={0xfb, 0xe, "1654d54801c572d38cb9e93284bcc5231808bdefe54cc447efac75284ac70b74a59a3e2023244d6940645bcca19525889b480631a064806a3595fdaf892631f5abe3683a3e336e7ab0f26685c48eeef844823d7b00c2e37e1c47ecdad5e8ac72ba90155edb6e3ee84d96aaa9d81b1b81f34dc402b145b71ebd7cb16e984c3078478958bd5f829879d498a6ee1229b9952349a1aadc0cb30dd7b3e730106e61117ac05279ab2f42a9a20ef6936a0130896ea49dd395262d2089d4cd885969acab31fd2b1a025f48df602f7566d520575b293f73e5b699fa5a89ad3ad0d0f01f9a1410266ac4defb8cd2af102d5cdf4299324c8ebba7bdcc6c73"}, @generic={0xa7, 0x21, "1415b5abd0081f07e8d9ae4dfabb7ace83dd5cd17b66b6a42d65506c84066f822a688e33d364c463715a03441b792a904a57ae5a4fcdfc0d63bad2c25ce8e2ef46c490e140dd1087b162ad7941a435c5ab39d64bbbd49165cfbbb5b41e424ee693c10d0f490fff11a5b73f3e883d59e06a6641ab62236aab66280debb392c81c8ee26c29208d7d199c2af33e40514dc1bc2b568c120cf595b8698ab3d09db983c1a372b420"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x70f, 0x3f, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x3}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x9, 0x84, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x8f26}]}}]}}]}}]}}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x4000001) [ 465.470372][ T4865] usb 2-1: Invalid ep0 maxpacket: 16 [ 465.476271][ T4865] usb usb2-port1: attempt power cycle [ 465.709513][ T8712] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 466.070101][ T8712] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 466.078371][ T8712] usb 1-1: config 0 has no interface number 0 [ 466.084928][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 466.096091][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 466.108083][ T8712] usb 1-1: config 0 interface 63 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 466.119288][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 466.130436][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 466.141582][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 466.152717][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 466.163843][ T8712] usb 1-1: config 0 interface 63 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 466.174742][ T8712] usb 1-1: config 0 interface 63 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 466.185624][ T8712] usb 1-1: config 0 interface 63 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 466.196486][ T8712] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=e9.72 [ 466.205723][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.232572][ T8712] usb 1-1: config 0 descriptor?? [ 466.275960][ T8712] sierra 1-1:0.63: Sierra USB modem converter detected [ 466.286255][ T4865] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 466.381280][ T4865] usb 2-1: Invalid ep0 maxpacket: 16 [ 466.485384][ T8712] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 466.541349][ T8712] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 466.554977][ T4865] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 466.600329][ T8712] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 466.651657][ T4865] usb 2-1: Invalid ep0 maxpacket: 16 [ 466.657540][ T4865] usb usb2-port1: unable to enumerate USB device [ 466.685453][ T8712] usb 1-1: USB disconnect, device number 8 [ 466.738250][ T8712] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 466.787431][ T8712] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 466.842959][ T8712] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 466.854611][ T8712] sierra 1-1:0.63: device disconnected 12:06:04 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x6) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xffffffff, @private0={0xfc, 0x0, [], 0x1}, 0x1, 0x2}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000240)=""/206, 0xce}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/116, 0x74}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000500)=""/28, 0x1c}], 0x6, &(0x7f00000005c0)=""/79, 0x4f}, 0x40002000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000680)=0x8, 0x4) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000006c0), 0x4) r4 = dup2(r3, r1) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000700)={0x3, 0x200, 0xada}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000740)={'team_slave_0\x00', 0x5}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000780)='/dev/full\x00', 0x400, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r6, 0x312, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000900)='caif0\x00', 0x10) r7 = socket$inet_dccp(0x2, 0x6, 0x0) bind(r7, &(0x7f0000000940)=@l2={0x1f, 0x4}, 0x80) getsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f00000009c0)=""/41, &(0x7f0000000a00)=0x29) connect$pppoe(r2, &(0x7f0000000a40)={0x18, 0x0, {0x4, @empty, 'geneve1\x00'}}, 0x1e) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000a80)={0x2}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x38, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team_slave_1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x240408c1}, 0x2004c081) [ 467.330411][ T8712] usb 1-1: new high-speed USB device number 9 using dummy_hcd 12:06:04 executing program 1: r0 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)="d2e6e5bdf62ea8fa95600b9b7e5bb7a62806db30ee344defc1b407afe4a514b0c41b4bd85a6e562c75278e91fc", 0x2d}, {&(0x7f0000000140)="b2a64dec2b1dfbef31af2fe1278053db9542d8968387f9a729f2bf2d1089120f8f59855f6238681e306a461ecf5d0a598f46f4a80547d49d96251e67bd15e3e1f06ee7de0610e1d286263817f0f0f088125a66ab825cc127fbc387a47323f9d54832d4e6ff55923b7a13f64aaddb6dba6a97002d36fa91114de3c5713ddeac750e1d00b25951e2c512e0ffe7b348206b159e00ed7a0ef091bfa021b4110f63ab73ea2f8f", 0xb6}, {&(0x7f0000000300)="ea208626b121abc07c9794b7142a765c14df21cafe34cfc7ecf33b5eb87a4db40df258c9b49949a03a5351277b4e83f7c79b8bf03db9b333b58bbc255b6a125c19f6207e70", 0x45}, {&(0x7f0000001540)="742d9d028feb561502b8bc03676a6177fe3132466448c444e2dd7791ad9bd24123f434a4cf25364b6af5d589397792caaffabd65f6791c648fa455ca071bfa776d81a365fa7cad6c199ab7feb3bd78f8450a4be4c404a56a8010529449c6244a5eb15fb1bae6d19ef9562c59657888900d44795ca929d2a64998329281e52afb0861bf110952d3b4d687849a306fbbdff5452232b3241cd81d81e5c7b54bc5929a74594161efbc49bf8e2a7456d830e24a3f78557b1a11109d614c4feca8a2ab752a0cedca1884814846a61a735b5e820a638815cf3f3d9857727d76565b6911a41e3c7f60d9d256767d87d7bd185310da08e1988fa6ca475a3758e975b4d7682af385d852e8184cba5b1f0778cf46f3a9d5393980eaa3fd3d0993edf19bb75039b238e22a095d7409fd2950ec1bf2ffb74b82c6a13bd8bfb27417ea27079368a1fb12215c9d9bf7bd459f83a9b55eefb9a4e3af1152f4abd55e0ddf00d61052c55ed06245f39f61ea00b35de68af6c9fc05fe4bddd8e1c1cfa9860e81e6cb63264f1d10df31237acf3c5860a30af73a8a62e61f7441bbf1e440cea26a8d79146f3c3aca38fbf8b96f439f4d84ca2fa782085b374772d18ed0e6c7416446c9b8f4a4a624d7d8db390c61e9f1c210a278f3a7fff2ec20aac0fb5c3cf1c84fc919eda263b64ccad04ee63b37efb43507df20c21eefd8b1bc9868567c6f8a0539be267809ce139d975b06fa580cfa841883dc152314cdf92e026d4182d129238fc38b3e8c4d63f747b8dc5ed39122c162a4447411f15c77be6a6761c7dde936bb2d520872fe142433a05b3e6455a3db3b49f45e206d8c6efab5eeddc310c23895d31d56a7729b6768f6649262754a614e0e83f8a535aa0938813f629261f9b9cc19bd31aacd7114244cb6a532bf8514b07b5ee4b41489fc95b31e24065f7b9d8165bc2ec7e19b21aed48c9c3e815fe385bf1fba20ffcfdd6579cac2d7e913a9148e58e1ba161e1911cbe4fd402db9ecd7d6fd6e014f4eaa7e24d23ff36ad6ed0baad9b3b90844c0d480487ff66d60842fbf5f10d517da68a3edd0cc02ed3a79c7a153790380de94fb7b2792cad348bae883fd9ecd84e924ad35bd524a45b59d2f8dade802ed2c517b7749135cf62d88a59a2614535b8da1909e2b5ad52aed8cd207c280f471cb2fce35e7ef3884f63d46963533a101a4de6b8dd7b328d90a7a43653c79367256a4bbb5110ee53cdf082b3ea8568f285d3f64a5fff77f531002b287c1bcdad03f077e417f68b27f7cebb8836440f74b094ad3d6c0ce8f5ac6197d5276700610b125f453f8bea8b015da8d3a0a9fded9348fcd8333997c3f576f354b1ef01c66f26e3f4f7a7e1fbe7309721193562d98eeffdae0746a0bc2138550fe251a7fe18071244e602a9f9675ce27960cc0d22d4a00b2b8c0162261fada999ffc99db0d12d32212306f1986b769204aaaafb14af3b022cb62eed42e1a1173dd28a3c3a55dc45eb996a6440d5558152335acdbef0ed71276d385052546f7a1933d89caa0265ef077da6349895ff46bf2c9e16fcc2387c8368b645fc38a2ffb6c0e3f02b49e3c3a718830c0225d22fd1f7a5f8e036c84a728f694e00f5f6fcbb77c34a4f320a4f8", 0x487}], 0x4}, 0x4008042) r1 = accept4$inet6(r0, &(0x7f0000000780)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000007c0)=0x1c, 0x81800) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="00faa719", 0x4}], 0x1}, 0x0) [ 467.701040][ T8712] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 467.709758][ T8712] usb 1-1: config 0 has no interface number 0 [ 467.716037][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 467.727294][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 467.737302][ T8712] usb 1-1: config 0 interface 63 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 467.748298][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 467.759491][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 467.770636][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 467.781874][ T8712] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 467.793043][ T8712] usb 1-1: config 0 interface 63 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 467.803936][ T8712] usb 1-1: config 0 interface 63 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 467.814838][ T8712] usb 1-1: config 0 interface 63 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 467.825704][ T8712] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=e9.72 [ 467.834932][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:06:04 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x460000, 0xa9) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x21, 0x30, 0xe, 0xc, 0x7, 0x2, 0x4, 0x160, 0x1}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = socket$kcm(0x10, 0x5, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2ea4000037000505d25a80648c69940d0124fc60100000000a000048051282c137153e370948018000f01700d1bd", 0x2e}, {&(0x7f0000000140)="ce357e19d60e5647ae0926337f8bfb155fcae0ae607d12a2a0af623854eeedc764de8af4d6", 0x25}, {&(0x7f0000000180)="849da76c24b36b65714dee72abab761f710ba5841191a290b31a201be4f2d3002a7625b7fac79c96695229a907c0ee915ba19398684e49da3c8481e23f9db206ea4df30104", 0x45}, {&(0x7f0000000200)="e8cde80594e9b6176f8a70c3c15b183d325a7512c581e5619058be0c81cd117c7f68f4d12de12b69", 0x28}], 0x4}, 0x4000) [ 468.152841][ T8712] usb 1-1: config 0 descriptor?? [ 468.235204][ T8712] sierra 1-1:0.63: Sierra USB modem converter detected 12:06:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x781, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000980)=0x80000001, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.limit_in_bytes\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) read$proc_mixer(r1, &(0x7f00000000c0)=""/191, 0xbf) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x40, 0x5, 0x7, {0x7, 0x24, "21b1fe81ec"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}, &(0x7f0000000240)={0x0, 0xf, 0x44, {0x5, 0xf, 0x44, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x8a, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x2, 0xf00, 0x0, [0x30, 0xc000, 0xff000f, 0xc000, 0xff00cf, 0xc0f0]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x0, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0xa1, 0x8}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x8, 0x0, "e6edc6ad", "1c8b295b"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x0, 0xea, 0x1f, 0xfaf0, 0x8}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x20, 0x1, 0x51, "407591a5749c5ddfbdd93397a818199a2b5a24e4ee8510f765512ebc437e12bc0945b9568301d8b977d5e8bd778b0bea062b3b0b8435f7b10011dc4647effa4f5643078402cd61c50ca5837106203667cd"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x12}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x3, 0x6}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x160, 0x4, [0xba9569f12da385a]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000680)={0x40, 0xb, 0x2, "89f8"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x19, 0x2, "e8d0"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0xffff}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x80}}) 12:06:05 executing program 0: syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000240)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) close(r0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000040)) [ 468.536849][ T8712] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 468.591319][ T8712] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 468.626996][ T8712] usb 1-1: Sierra USB modem converter now attached to ttyUSB2 [ 468.671130][ T4898] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 468.673208][ T8712] usb 1-1: USB disconnect, device number 9 [ 468.737818][ T8712] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 468.777326][ T8712] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 468.816903][ T8712] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 468.827417][ T8712] sierra 1-1:0.63: device disconnected 12:06:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x408400, 0x160) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x37}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x72, &(0x7f0000001280)=""/4107, &(0x7f0000000040)=0x100b) [ 469.060101][ T4898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.071357][ T4898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.081485][ T4898] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.40 [ 469.090739][ T4898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.282185][ T4898] usb 2-1: config 0 descriptor?? 12:06:06 executing program 0: socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x4000000805, 0x0) connect(0xffffffffffffffff, &(0x7f00000002c0)=@ipx={0x4, 0xfff9, 0x98f, "01e7e7bf7d27", 0xb6}, 0xfe) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2323, 0x5, 0x9, 0x0, 0x6, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x2, 0x7d97c0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="dd5cd5cd49640b0c15ad8122bc8d5aab9fbc860b11a4545a4b1e0152b953b4d1dd1899bcf1b30d4c18759e108b29527b0cce6a1f085ff3827bdae0022216b339f1c6a2b31599c93d5ba3b9a8df3618e18c6a994b6d6e03cda01f573af6c3704906f31fa93128e7da3c2c78099125ffa383dbe6b8becf4582374891228fa702f60514b3992d5373036825bb0807b8590317abdf4bb78a41afb500b1d41d192ac89c03cd75194ffa765867d7cea90a0d33d5b97a1e5886bc8a05b90704e1a6085eabc7de5bed014d90f74d0bfc9d54184d99cd1b01944976", @ANYRES16, @ANYRES64, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44090) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x5f, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="479d55c4518e8847122e182c89d3309e9e4caa3d736b65781b79f3e0613fbb"], 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000100)) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fbdbdf1a020000001400020000000000000000000000000000000001140006006873723000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) [ 469.412180][ T9207] IPVS: ftp: loaded support on port[0] = 21 [ 469.769068][ C0] hrtimer: interrupt took 94935 ns [ 469.794296][ T9228] IPVS: ftp: loaded support on port[0] = 21 [ 469.797942][ T4898] uclogic 0003:5543:0781.0002: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 470.457334][ T9207] chnl_net:caif_netlink_parms(): no params data found [ 470.551374][ T9224] IPVS: ftp: loaded support on port[0] = 21 [ 470.657798][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.666036][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.675821][ T9207] device bridge_slave_0 entered promiscuous mode 12:06:07 executing program 0: socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x4000000805, 0x0) connect(0xffffffffffffffff, &(0x7f00000002c0)=@ipx={0x4, 0xfff9, 0x98f, "01e7e7bf7d27", 0xb6}, 0xfe) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2323, 0x5, 0x9, 0x0, 0x6, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x2, 0x7d97c0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="dd5cd5cd49640b0c15ad8122bc8d5aab9fbc860b11a4545a4b1e0152b953b4d1dd1899bcf1b30d4c18759e108b29527b0cce6a1f085ff3827bdae0022216b339f1c6a2b31599c93d5ba3b9a8df3618e18c6a994b6d6e03cda01f573af6c3704906f31fa93128e7da3c2c78099125ffa383dbe6b8becf4582374891228fa702f60514b3992d5373036825bb0807b8590317abdf4bb78a41afb500b1d41d192ac89c03cd75194ffa765867d7cea90a0d33d5b97a1e5886bc8a05b90704e1a6085eabc7de5bed014d90f74d0bfc9d54184d99cd1b01944976", @ANYRES16, @ANYRES64, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44090) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x5f, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="479d55c4518e8847122e182c89d3309e9e4caa3d736b65781b79f3e0613fbb"], 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000100)) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fbdbdf1a020000001400020000000000000000000000000000000001140006006873723000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) [ 470.826625][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.834164][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.843828][ T9207] device bridge_slave_1 entered promiscuous mode [ 470.880372][ T8544] tipc: TX() has been purged, node left! [ 471.093839][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.201651][ T9412] IPVS: ftp: loaded support on port[0] = 21 [ 471.206909][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.230547][ T4865] Bluetooth: hci2: command 0x0409 tx timeout [ 471.692750][ T9207] team0: Port device team_slave_0 added [ 471.885793][ T4898] usb 2-1: USB disconnect, device number 8 12:06:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x1c, 0x0, 0xf5, 0x40, 0x7c0, 0x1501, 0x6514, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x12, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "81bb6e86a9"}]}}]}}]}}]}}, 0x0) [ 472.056102][ T9207] team0: Port device team_slave_1 added 12:06:09 executing program 0: socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x4000000805, 0x0) connect(0xffffffffffffffff, &(0x7f00000002c0)=@ipx={0x4, 0xfff9, 0x98f, "01e7e7bf7d27", 0xb6}, 0xfe) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2323, 0x5, 0x9, 0x0, 0x6, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x2, 0x7d97c0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="dd5cd5cd49640b0c15ad8122bc8d5aab9fbc860b11a4545a4b1e0152b953b4d1dd1899bcf1b30d4c18759e108b29527b0cce6a1f085ff3827bdae0022216b339f1c6a2b31599c93d5ba3b9a8df3618e18c6a994b6d6e03cda01f573af6c3704906f31fa93128e7da3c2c78099125ffa383dbe6b8becf4582374891228fa702f60514b3992d5373036825bb0807b8590317abdf4bb78a41afb500b1d41d192ac89c03cd75194ffa765867d7cea90a0d33d5b97a1e5886bc8a05b90704e1a6085eabc7de5bed014d90f74d0bfc9d54184d99cd1b01944976", @ANYRES16, @ANYRES64, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44090) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x5f, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="479d55c4518e8847122e182c89d3309e9e4caa3d736b65781b79f3e0613fbb"], 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000100)) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fbdbdf1a020000001400020000000000000000000000000000000001140006006873723000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) [ 472.243280][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.250526][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.276774][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.430295][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.437396][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.463680][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.570056][ T8712] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 472.610270][ T9471] IPVS: ftp: loaded support on port[0] = 21 [ 472.930473][ T8712] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 472.941335][ T8712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1646, setting to 64 [ 472.952553][ T8712] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 472.965715][ T8712] usb 2-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=65.14 [ 472.974989][ T8712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.145242][ T9207] device hsr_slave_0 entered promiscuous mode [ 473.173828][ T9207] device hsr_slave_1 entered promiscuous mode [ 473.190731][ T9207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.198359][ T9207] Cannot create hsr debugfs directory [ 473.272389][ T8712] usb 2-1: config 0 descriptor?? [ 473.304794][ T9467] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 473.311802][ T4865] Bluetooth: hci2: command 0x041b tx timeout 12:06:10 executing program 0: socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x4000000805, 0x0) connect(0xffffffffffffffff, &(0x7f00000002c0)=@ipx={0x4, 0xfff9, 0x98f, "01e7e7bf7d27", 0xb6}, 0xfe) socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2323, 0x5, 0x9, 0x0, 0x6, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9b, 0x5) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x2, 0x7d97c0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="dd5cd5cd49640b0c15ad8122bc8d5aab9fbc860b11a4545a4b1e0152b953b4d1dd1899bcf1b30d4c18759e108b29527b0cce6a1f085ff3827bdae0022216b339f1c6a2b31599c93d5ba3b9a8df3618e18c6a994b6d6e03cda01f573af6c3704906f31fa93128e7da3c2c78099125ffa383dbe6b8becf4582374891228fa702f60514b3992d5373036825bb0807b8590317abdf4bb78a41afb500b1d41d192ac89c03cd75194ffa765867d7cea90a0d33d5b97a1e5886bc8a05b90704e1a6085eabc7de5bed014d90f74d0bfc9d54184d99cd1b01944976", @ANYRES16, @ANYRES64, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x44090) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x5f, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="479d55c4518e8847122e182c89d3309e9e4caa3d736b65781b79f3e0613fbb"], 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000100)) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fbdbdf1a020000001400020000000000000000000000000000000001140006006873723000"/54], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) [ 473.574918][ T8712] iowarrior 2-1:0.0: IOWarrior product=0x1501, serial= interface=0 now attached to iowarrior0 [ 473.667007][ T8712] usb 2-1: USB disconnect, device number 9 [ 473.725216][ T8712] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 473.839757][ T9552] IPVS: ftp: loaded support on port[0] = 21 12:06:11 executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000580), &(0x7f00000001c0)=0xffffffffffffff39) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x8004) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYBLOB="3f40da58f6af9f5419fc43a936ad77feff60c8914b5dd59296d6987b86764929ac2149ee9186a9991ae3001eb8d3d459930f0ed4f6ad89c30206e22b0cf95081a36c3112c3b14233e4226510c2bb1441f0d858c9540670dad712f114b07a307b963a6b687332790307cd12564f2f53a2a0023a1c8a04073842cadc75078e74511a08c2ee17f965d4ce03dd63c23704440ee1a741a7d6388f7ad015125d6ed119bf4a2e4b7e9ffacd6dfbd2d5aa0dfec57d07f25435f2e242ad2deae9b1cccbbb", @ANYRESDEC, @ANYRES16], 0x54}, 0x1, 0x0, 0x0, 0x4844}, 0x22048100) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0xffffffffffffffb9, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x8}, 0x800, 0xfcd4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffff) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x401, 0x604642) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x3001}}) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff774f27e59ab500000000090000003f0fc7ec6e26560000000008171dfd49d2e3295c71850ce0432cfdf18ae504156037115da6cecc100b579a4a8f3029990cab5ac4865f9d709f366e18fc641dace86c4937ff0a7bff59b68833e75f5bc198d517f3571c08a1dd29f366b9ea75c000000000d07a3e109efdb657abf5fa746d68d93267f16412d0c439ef63b20826cb404ea8ffd8285dd867452858a51903a904dcdd35b872e3f76ac7ac79"], 0x58) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x6}, 0x3) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000048000), 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0007001000000008000007314a9b002800660000062f907864010100ac1e0101070759ac1e0101440ccc9164010102000000080164a269fd8b2fe3bcaa374a1e5a2b6ba434cb603a3477b2c3bf799dc245fd649ba628098ca200d509ed1e2de08e1c909b45832c708a7147043c8e7c7f41cea5fa568521fe8a0b08b2341e48fc878797b82ebf7cbb8d426981190926399a7f927c924edabd93f58f1cbec4b939778f0a15bde2f9d8ebe4859f94f281c3c04e715b2aa498aa5a2c37c0414e9b7b5fde00cb4bbf379f74fbb42792"]}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000b40)={0x104, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) openat$autofs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) fcntl$addseals(r2, 0x409, 0x2) [ 474.621296][ T9207] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.711370][ T9207] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 474.791061][ T9207] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 474.853690][ T9207] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 474.983999][ C1] sd 0:0:1:0: [sg0] tag#178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 474.994619][ C1] sd 0:0:1:0: [sg0] tag#178 CDB: Test Unit Ready [ 475.001365][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.011226][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.021050][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.030864][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.040650][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.050650][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.060443][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.070245][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.080059][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.089869][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.099662][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.109475][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.119305][ C1] sd 0:0:1:0: [sg0] tag#178 CDB[c0]: 00 00 00 00 00 00 00 00 [ 475.353548][ C1] sd 0:0:1:0: [sg0] tag#179 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 475.364168][ C1] sd 0:0:1:0: [sg0] tag#179 CDB: Test Unit Ready [ 475.370866][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.380674][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.390367][ T4865] Bluetooth: hci2: command 0x040f tx timeout [ 475.396524][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.406391][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.416187][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.426084][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.435906][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.445726][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.455539][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.465351][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.475140][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.484969][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 475.494802][ C1] sd 0:0:1:0: [sg0] tag#179 CDB[c0]: 00 00 00 00 00 00 00 00 [ 475.850347][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.926128][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 475.935959][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.959804][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.006067][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.016556][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.026414][ T4865] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.033744][ T4865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.092292][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.101932][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.112230][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.122488][ T4865] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.129851][ T4865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.227654][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.239654][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.251623][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.263160][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.334878][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.346930][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.357941][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.369295][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.379410][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.389559][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.399763][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.416094][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.534716][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 476.542641][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 476.602764][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.687713][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 476.698379][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.782358][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.794020][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.826899][ T9207] device veth0_vlan entered promiscuous mode [ 476.843496][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.853115][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.893779][ T9207] device veth1_vlan entered promiscuous mode [ 476.931786][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 476.941975][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 477.004785][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 477.016100][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.044436][ T9207] device veth0_macvtap entered promiscuous mode [ 477.082797][ T9207] device veth1_macvtap entered promiscuous mode [ 477.144665][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.157671][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.167768][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 477.178291][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.192916][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.205006][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 477.214837][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 477.224500][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.234738][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.315402][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.326012][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.336272][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 477.346891][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.363664][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.379997][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.390606][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.483696][ T8712] Bluetooth: hci2: command 0x0419 tx timeout 12:06:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1405, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x148}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$setsig(r1, 0xa, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 12:06:14 executing program 0: syz_emit_ethernet(0x138, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x102, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x0, 0x18, "935c191de6807ada00ea310966a29ff17f5e8106ee5d580029301c27dc1c2ef6b823f62f41cc3314f16c3cba29637ac491c3c184d6e4f91e98435c8ce3a385e6580fdc40c85b661eededed7be259b6be71012829d939dd33688d36be5495357aa72a0aa25faaf0b7e142a5f2efa5405afc24d5597e4be19a2bf4d0509b885ccbd44c249705052a5bb2509174d2047c54173b4ab8f10cfaa624e265e5c01ea6d23aedda17d3553b93540f133d3caa0aa7bbb52b78c15f0b0a74409331f0a78b31f60f"}, {0x0, 0x5, "c2d642aa83cac052f7914c709b81eafa8807fc1dd6d88d540c028677a27f6958b9b4b0b621fb88b0"}]}}}}}}, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x7, 0x3, 0x28, 0x81, 0x0, 0x1, 0x2088, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x10000, 0x7ff}, 0x800a, 0x4, 0x9, 0x7, 0x3, 0x7f, 0x9b}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0xffffffffffffffe6, 0x2, 0x43, 0x4, 0x7, 0x0, 0xd67, 0x2502, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x311, 0x5, 0xffff8001, 0x0, 0x517990b8, 0xcc66, 0x1}, 0x0, 0x200003, r0, 0x9) 12:06:14 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2323, 0x5, 0x9, 0x0, 0x6, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x9b, 0x5) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x2, 0x658740) readahead(r0, 0xfffffffffffffffb, 0x1493) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f9, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0xfffffffffffffd21, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030700000800000000000200000004000180a59309ec1a14f4008f8b667f0000000000000000000002"], 0x18}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000400)={[0x4]}, &(0x7f0000000440), 0x8) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x4c, 0xa, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '{+:\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x880) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@newlink={0x28, 0x11, 0x8, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2400}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x134, 0x0, 0x1, 0x70bd28, 0x25dfdbf8, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4000004) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002800}, 0xc, &(0x7f00000000c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="f0130000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250800000060110280c5000500bd757f5d145c76f3988cc9d6ea365f4bef00a0ec288fb9f30f19becd03ddfe4034ddbf4738abd3b294fd9a51864bb1754789316abf09506323a4235bb58777a527ac12798b364b34b14f648101f76275b8febe77912309eb47a646c34c377aa1dc55fbc7c2cacfb9ae6ec45d1aa0a25e95dc91e1bbda40787f6ad18e56a0ec9ecaa030d6e360d58c12a0b113393264b57140a02f1c74b4198d1a2a4098a7fbfb218157e217c0f7bb7a4effe04785f6f96003f65221de9a92c685326259edb226cf00000004000100041005000af588d15c8126b255eb9b324175afb68ccea553fc5fa567168716d85eb1120e449d1df3a09261a6189cfe590d93a8ddd303a463c5de13b436d8d5d30c4dd67e05af8e5d0de8214821b3d73d79b91b3d863f1e77fb0006c21831c71da7b2b1995a292d05d9557ce5339a3e99579107ea6bb0cc3a8783bdd3d1b677e729b176926c549c19d768e9366f6b6588c10962a840c05f8288c5389172836ab1c5701e0da4a3ee832c010d16799f2a88fd8c73f334742fcdd773a4f8793149dec628cb220371867ec038f7ca3b92c055d780ec2b12a7172769ee78b8b9595757b0928e6b2536de42eebd0dd90b1cb8c31ac33f48d92568685af7eaddcb714c258655c7eb41340f7273eba9e1c5f8acdab1ab5d5c2f3d7f2147b71d02786c5785ca6c9b49cff799438c912143b9afc107a38621d90161dc1d9d7c7b261cbe14f3bb0ebf64d890c8dbba5cdc6362f5da7bc6513e5e65b3219df922409b8e44fd90bbd8616e76f8b08052df00998d6b0302438564eba6f9309bee20a5b0320e818934cbf3de41273a4c72d8836415a75a5fe611bbbd532aca1c77ecc4602907f82e5eac3fc2f42fc0ff6fb155f185829d287ec84d1c4dd881aecb64ace0c90d9cc4da83d724697bfe6038967df45b9dd56d397baf43c82a1e99f74b6e42ffede124d7d8774fa1cba6d59efb1182a301ff9e1afcca090c028bda0ab088dc93ba8a7c203464e1a76e02fa4a15d12b554bdc1eb3dcf6b38a0cd43f49564c7f6dd7985dedebdec212a17d2051642bd11b068781c562139644f079f125a35218fe34fec1e8eb0b18d36265d370be5b15b9e344475615fb718aa765bddcf0517b2e3ad8457724374954ed857e1f1fd496872a773f056b8eee3c1b4cade0f7461720a34461b45693a988c3ecd12d4fc6bd4d31678f1cdca9c6e2e58b002b868cb93dea7b66acbd8fc06de288d7049835e514004572e779e9c60212a6bb0076746e224ca044db3062a8467bde5a03474ae07b07a6f456e26d43d435b686e4f5694fabd385ff1fb00d1c976444f501e181deae6475a32e3981b80f004d2e9bd78d84050eb2c40f38096facfb86b7db17c7017cbe43880993289855d63bd96dee0e4b5c9f29a2467ffff925108a9477402188112e2d70deda17f16929c9e70ec91ce52a735d371454cd39cc223267ae337d5e35b7f718842734e43e3bcbbfca5a9b26870608cb9c1d013da59a1ad9a985d21673db148af1d4816786d30fcd353c214c03deaf41aba1b45de6d65ed83f013a00c7e2abe7e8d52f950a65e18a4ea976e37c6225229ddb418256aac0455c08e9efaf176641b8eb1cf5748e8081f94534c32a1190014a49e760beb393f89b010f01d9264fe4c93f1b08a17717cd7ba9f87ceefd91dac049c0ae6a0f82285e675a7ff605336c10da6e61466180bbe2c641aae6a693d44f6dfc75e7cf00bde0f0c81207a336318d5d5557482eaa511b87f8900f18821e0be1b8911454377370ebe36ae9320d631ef6c2c72443aa81e0e6832175f25304485529b8bc0ffe68e3204cc0e72a127734df5dda3b58fd3c18370f1118c034184de808db53403615d59c86f1726324bba893d18b497ad9642ff6043fee0c380275cf96930904f36031610d3d538a5f75a4bf37f84e5fc7847c911a3935c5a393d3f3ed03f870395149a9bf2fc6c1aa7b38994dcc2abc689c36ad831729885cdd66f03570e2f90c9fa0cedcbbeda150966dd838247c0a6174f0e21930a51e87033a5de8a4cc8e48451c426746ae558cadb76910a294f50fadaeea21976a716ce029a09bdb44ce39855417ab55ab2c187a4e3933ff888e8a0033545feb5ea8e81162f0059cd32689ad9966687398b60dd80079248dc6cada1b69da3a8e3d6e322c132c12592b6839ab6262c53185eb95813eca0d38b90a3e9a3f70a552ce9aee21b03e4f0ad6c110d853e0398bcf5c483dac75815eb18f1aa404e3e8e3919b056b3aa78cf69cd30f51a5517e156e1b7c17dc8cc000bcd2eb022a4d4738b1b0c274ca71f8041b80c776b8f9ef4ff12ddd28bb07d82b3fc32f04ace5d04636cf8c479839d6f2664495122208c4f6f23e124db1e757bc44f2c642dbc11adf999de3fc3722361efadbe3a0752ae2e01250066fd96af2f30aad1996ee9325e4a8d3782a89f8ec674d543b6cb597d9d0afd0b225cb45950f69c44f33cb88dbd6673b2e62c33699f2b21b87260243563811ae8db1517df8a714ebf3045791e256702991cd22c1278f9c49f33882c459309371db4207818d59bbac241b71a30cabd819bfe5ef3a40f508b9c71f8b0782adf505cb7c7e0696973880132c604c7049a4517a531e650695b3e8028b8fe74dd1169ffe2461fc6eb03a4654ef382872f308c21fc56c06457c0fbb3acf22760e2e62c328f753274c345d19bce0adc70a080f25452b10c3e22b6c75d804a032d742a95a8a34da6ac5206d40a9c5082648b2032b41881d477b61c03752f8a4e9fe6e6af81387bb6e1a847ec1605f318f6418a5b6e4d963c76deb6343ff633fadc3eca5524eb0c3d6c41623b6f1711a39af03580cad181501b678097664f001a743c877b7d19b3bfc5a16fd139077081b74fb5799b1c80f3922c5365c301046bfd791acfdd748373263bb85acf6a122a35cc4a2005105e2a35cd228f43279321df9b7d7f0930d1e2339c88492b9fb73eaf3e155dd162d6c84a36abec12eac92c8bf08ffb12a7acd43f2cd608d036c65c9758b4048cc115074569a1974f2b751fd5af8df9e435e8f7a3efe864e55793fc7c8dcc950e4d935a23222f66df110c0e753d9645763f1a0922294bb8619dde8881569ddafc5c5dc666161f37c914e16863cb6cd7f421e15dd473833ac3a7d46eb21af1e2c6cddf9b47336054637185821df554583de9fe13cf3acae9247ab480ff4f9bb329ae7ea9ac92b5bb9c8137ade30a2426b5a5e006dbdfa6ad0b93fb21c87dd665ab408bd721a54f1e0b405a2eafb874c5d098a32022d2c7250f31ea46ba38064242861412499b110c118ac39fc740c9454251c4a78b2c6967827fd020df360f306535743b815ece40bb9bc3fca22048fe28f68ab652cb755b2c5853d741e3032907f4d3bf4d38f1653c58631bffa09fc1b8ad393decd11473d8f635a5ea832119e833298cf7046b74e6ee081c274bee194cd63e0cc3a6aa20999525c3130f72bdeab8256a628d57cbe11a8c4365a2b08dcd326c24b179ba7486cc976897a4579ed44af245a5a57f36e7b5cf4541a83734723c00545e8d04fc226e5df6329ee7a8aaeef63c3685f228797e8de20529d5345667451afba366b047ed03ac29033ce83f477a67bce7d32bdc85d29b08af1d579e17077d8f79816513fe6950602a13d31366c51a0ed907072b333cc675848d3b3d5eb38053abc67023332e6e800cd18416d3a1d01f0bc3dfa6828a546d66b18c5a18e539ecf13007483c1d7b3c67a9e41ab9ea2ce2a621385c30c451506cb2d09d9b77f9fb0583b0df4e82a8e839c094e206d77efb0f60679b6c28154168023a5aca255d298f4d9714ae1ca74a3ca9cf8c239e88336f82cd1b62b1a1c3930a8565978c649748863802a77713ac29a73d5ee239b18e5300f9affbec7d18259e4bc4bd32a6358e1a649e8ba24bd30e3d4582059633768de3e41d3e7cd323d8d46de7c4e81865823e63b648071f4892f4d190b43dab211aeb3fd52955677795db211a20955eeb302296c3b0e484a60a81e4256db24eb0ffcde4e6a9807745b48241bd117a9444d9b23b81dfb43c060137b6d9ac086013195762f15ad11168b423972a06da8dbfb5b8cf63a1a442d233dc6cccd5f006ef2c0f3b47a25acd23b13d7a7cbdea0cffb9db207a36778e8956af0566b1adb1851c11954ba2ee59e9a17f02f6b6be52ab6466e2d77b8d075b40a8676fdf05b6bbf7d00922d89aced7933ad2b606e9e143a8cabf256f3a0394d6cc028a3956d99d88adc29065c376b43bfb6fea98102682a2d6d9ffd5a1c6f0494f868efe3a39ba90f30142a697d997b1278a2bb00259da20ae8d7933018fd2a696cf261d3f5a95cd4e1f7e329b6cb1f920c203fcd8ef24eb9f61fc7c91fd1bdf24bf6c1c663b046a770a5c92f6362ced4f042035b200dbc5ebe05344afb3163d6d2d30a34db11a46f22baa0fc1c955db458e1e1ec7041389c9af4005070a14a5ac62dea47e976582d19555363cbce1ff8b6a83d4537f8060912339a102caf7378440d141d7e8d5f6b0f653a70cfd031681dc541a32015d5b8c34d87a016e56cb2595e6a896cd6e6f341d7561dfea7e0cdcf2805508e2a7ebff28454043d7267177458c9033cc9764e116efe9b09a6057a7699df23351ef11498d11231eaba074d0dd66b2071b25f30a624617fae33f02839a40a45b63c9083807af6f5de2164170b3adba3845c96cedc9e02ae4c522dd3bfc66b271c6931bf550c6f556378669367fa44dbe674225e53f6dd8e9ba12aa1af96caec29bb91ecf1585fedec9346a32c109c669388ecfaa092ec017d39bea9b54f218cbb33348aab863a12f0a5c5aacd6425bc9f81efeb99ec8a57c8e9fffc6b68363f359c78829954649cae2c773d3b0d83623147f4e5577ccba28587f798941525bd62cc2982242d617e302fe3acd6b886c8a451ab4be8d8fa98b7a228a525facc1264673173e97bf29a4a21e4a6999d8706bf81eb72736daa00d778853fbe40366ad238662955b5d677849e10f5d1e1b3ba3c86df0b6952fff7cf85d2f87c7842504a27f8cd5e1edc32f4633d769e369566b175b99116ae04a3e3585411426ca97ab8bee841c03292a3e899beeefb635cd8c0f5f40ee95b68a6c1a7381c92107b464310a18ffd5150fafd9f3523099f7a6e87d3cbc1011cc2dd8768a6be45e811c2033593d5d234c205ffa7a22b9b16221735170816828eb0f1dd0f38d1cb0d31b3aeee3ae60b60b6a92885dc4af32d2e99f07c44e9276283c7ff7c0067803f69a36feda5b3eb8bc7c7d3e85ec96b9f4a01ce073c4b3dc5297d138de43c8eb7a5f609dded4540e8296a3a01fceed20f41b589bd954ac83ddfbd69691a9b4ed7e2bffec68afda50e7dd6af4bf1ca4dd25eb5f831a4768f9025a547b5072ebb1384d3d0123fa259f0f215dd3c372c57e701ae27301a3aa4b43bdbd9d5300c9fa48723902f35ac156ab241154b6fc96a0c6fe6442e0dfab0bfce9b49ee143488db8791f7b20a8cdffb8d5360c9f445f4fd30edf8a34148b45fd0ff2eedc86fc814e530aa18564c3cf811a1feeb7fb1f9218c951e99046f74d4e30f572d7a62f2073d3f8067d75d22f1e4136a44a39fcb10e81727d04c8ddce9ee514b53278be0be195855816935428750705b45202c781ca5fc2c5ce84645d78d4400929213198d2b05350391e7d277d71923d838b1a0b3734477f8c98732ca3ff25439fe6756084f7752023f2e9f2cd98deae1a756a9d2391306f2abe27a70b1035ea6e385df728fc18221b4c8a3f10f55d52b61dde641db29257b5d287b5389aab805e15d2623f9661659a304b5964f85fdbe7ccaa927aa46a47ba1a919bf6a89ba9b8a2e09a177411eab5862af8636533a5ae3e5153b95c318d6be73dedef35cd833c171be354e7a14f1709f669092c5626b6467a65d7a96a663a96cfa409bf5f952fdc21ea29b445407dbc5a20678cca8151b76c64edffe357475c1b98b97a5baa26035b047572c28c8604adf2de4ecf18176312b5b2ca12b20436a510565d8d8010465148adfa932c032ba7a08dd8ceba3be2e2a3ba4601d3d19138c0003802c000180080001006e0000000400030004000300040003000800020027a92d000a0002005c2e2d2b5c000000280001800400030007000200245b00000400030008000100090000000400030005000200000000000c0001800400030004000300280001800400030005000200000000000a0002002a7b7b272b0000000400030008000100ffffff7f48020280c80003802400018006000200250000000b0002002e7db92f286c00000400030008000100ff0300001c0001800800010003000000040003000400030004000300040003001c0001800400030008000100000100000c0002002adc2c5b23fc2e000c000180080001007e400000480001800e000200245c275b5d5c295d7b0000000800010001000080080001008100000007000200262300000d000200172d2384235c5d5b00000000050002000000000004000300140001800400030009000200232e2f29000000005c0005009fb5c01ad19f22e573051efcd2ad072ac049d4ddccff1565b09a3eb654c79d0150755902abbc6cd4125653c91fe8a2c22b4032d1e7c0dc4f091904c61d3354ba6a50238f2c4b23e4426237a46ef34c8871dcd5adfbc581b19800038014000180040003000c000200245b242b40fa280040000180070002002b260000070002005c230000080002002d102a000400030008000100010000000400030008000200402e29000c0002002d2c2d5c295b7b00400001801d0002007d2f07212f402d2d247b2d5c23402d5e28262a9228002627000000000800010022070000080001000000000008000100540000000400030086000400b6727957a514dce91b36d2c4981e83a3776157179c75af00e74b60ae58bc2e8d9fba4ef8dc145640a5023f25b5898c8e2dbe7cba28050482bae4a79f68514b3f3b827e79db222a2619febfccc79698e1973ae3303cadd17d16eb96cd405bac80b55591983ff7adf08980d84f00f83a66f367a65a0a1bc41bf6ec2ab7384569f5728d00003400028028000400301ad219f1042dd356b6361286cd8d67c556ad4f0101427cd3297e186fe1394152d5937408000200060000006b7aed4328d8796d3fddd5c038b2df264574658b3af6cbca16b5ae86f8c8f141b7f9d77d107aa81b6edf95d8a2a6d6ef714dc260031a42dda780e7a728afb871c0f5aad30f09632d37e66cf126236718c130fc210a042c05dbb17d806658ed4fccb85dfc549989c9c84c51f408ead02a533c6274179c407f2f6c2fe74b919f02cc78ec1be3"], 0x13f0}, 0x1, 0x0, 0x0, 0x8091}, 0x20000000) [ 478.211428][ T9613] IPVS: ftp: loaded support on port[0] = 21 [ 478.276370][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:06:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0xa06, 0x7, 0x9, 0x101, 0x1, 0x580, [], 0x0, 0xffffffffffffffff, 0x3}, 0x40) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000500)={@private1, @private0, @private1, 0x8, 0xffff, 0x400, 0x100, 0x200, 0x1800000}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000480)=""/88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_setlink={0x38, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}]}, 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="22911a95345ca694f549e807b1f2804ca53e551708b8a362aeed25d5ba66abee677af3f00675531ae50800eb9d40e6893b3817c613f35f5b2d21504e5074bb6492e104d89c5dd3528eced2f1c1dfb847646c1f64ca07903ed8c67ea45506bea827d37892c5f39a15f226000097c6247ae20c6ba9a1d0144c00f794de6ce72e507e1a13d5de3fdeb449f9e01bc8a3266f2812d5cd01fe6a7f448c6841cdcc50dcd95989", 0xa3}, {&(0x7f0000000140)="3e37b0169c6cc92e172f0775b49d6611211e5b2d8b261cf477495c6113278b292519a9826144a8b8b8720afc2a19070caf31017c19394c179844e88e97ffee8da43dde98d35d35a45e48", 0x4a}, {&(0x7f0000000000)="f9c2a23b2de9cb3009a5f01310c2151537e1bbce153a7bec634efa4f8be26ffebeb8d5ab8e9c8d0f39759e721d", 0x2d}, {&(0x7f00000001c0)="51e5aa368bd37f06f5403ec2229df71fa015ba5832478bd9d1203b4f95be0b344972013c7f4fbc4c8764f6a9ea08fa31f83ae5c3a9212ea4eda48243af09c124788f2b873dc21f38fcafb0fbb4809465dc59391524078039235268a8223af33310962b5e7035947385181e31973d43414c999cf1196814912aab430ae1aa444a24d63d25df20037d0fbc016ba8b56cba7942dce61ed990d6c86be33b2e999d0f28", 0xa1}], 0x4) 12:06:15 executing program 2: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000201, 0x70, 0x4ca, 0x0, 0x0, 0x80000000000000, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 479.006189][ T9618] IPVS: ftp: loaded support on port[0] = 21 [ 479.266553][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.336433][ T9664] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 12:06:16 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c0a08"], 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4401, 0x0) 12:06:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000032994840571902202794000000010902120001000000000904000000dab222008b6c7178033a8eb8015bff016f6471284e0a31af2a220de7e6074fc2296c3d8e66eb891047c1bbea2d4e976b88d10d00e41fb591347d5305413d7cf8c5232d261bc246da12aa21b81649f8f00c4f46d0c75b1072b5fbed19136c72a2d0be623707351462557605a8854c1da467276326ebed63"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000100)=""/31, 0x1f}], 0x3) [ 479.524241][ T8544] tipc: TX() has been purged, node left! 12:06:16 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) fcntl$setown(r2, 0x8, r3) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000002060108002c131c900008000000000011000300686173683a6e65742c6e65740000000005000400000000000900020073797a31000000000500010006000000050005000a0000000c000780080006"], 0x58}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 480.000379][ T28] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 480.041525][ T4898] usb 1-1: new high-speed USB device number 10 using dummy_hcd 12:06:16 executing program 2: syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000208000406b1d01014000010203010902920003010000000904000000010100000a2401000000020179fa0c0f020000000000000040000d240700ff1e000000000000000c24507de9ffffff1600ffff0924030100050005c07edb56e1e66b3aba5aa6aa3727590f0b9551f2bc9b7c44ec5b61da474c3d6c411eb0bbc0a2dd9d48e9fb9bc7f126b0e6cab81b19669a6e08102929811000f1ea8744e71918c97193651c453d711b7466e2ce035ec22b676660d0b1f6a6262ebe7722a7295c4e641a194b89398f265e5f26bbca"], 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) read$qrtrtun(0xffffffffffffffff, &(0x7f00000000c0)=""/255, 0xff) [ 480.300800][ T4898] usb 1-1: Using ep0 maxpacket: 8 [ 480.383804][ T28] usb 2-1: New USB device found, idVendor=1957, idProduct=2002, bcdDevice=94.27 [ 480.393174][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.421572][ T4898] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 480.429842][ T4898] usb 1-1: config 0 has no interface number 0 [ 480.436141][ T4898] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 480.447567][ T4898] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 480.457733][ T4898] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 [ 480.467689][ T4898] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 480.476944][ T4898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.516469][ T28] usb 2-1: config 0 descriptor?? [ 480.630364][ T12] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 480.696058][ T4898] usb 1-1: config 0 descriptor?? [ 480.722345][ T9695] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 480.741039][ T9695] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 480.997378][ T12] usb 3-1: config 1 has an invalid descriptor of length 126, skipping remainder of the config [ 481.007893][ T12] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.232351][ T12] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.241714][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.250529][ T12] usb 3-1: Product: syz [ 481.254852][ T12] usb 3-1: Manufacturer: syz [ 481.259742][ T12] usb 3-1: SerialNumber: syz [ 481.730560][ T12] usb 3-1: 0:121 : does not exist [ 481.735920][ T12] usb 3-1: unit 5 not found! [ 481.863204][ T12] usb 3-1: USB disconnect, device number 2 [ 482.555619][ T4898] usb 1-1: USB disconnect, device number 10 [ 482.581673][ T12] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 482.950202][ T12] usb 3-1: config 1 has an invalid descriptor of length 126, skipping remainder of the config [ 482.961115][ T12] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.060514][ T9021] usb 2-1: USB disconnect, device number 10 12:06:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={[], 0x20}}]}, 0x54}}, 0x0) r3 = gettid() fcntl$lock(r2, 0x26, &(0x7f0000000100)={0x0, 0x0, 0xf6, 0x3f, r3}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x181) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x44, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0xffffffb6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x0, 0x6, 0x1, 0x0, 0x7fff}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) [ 483.190622][ T12] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.200180][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.208308][ T12] usb 3-1: Product: syz [ 483.212828][ T12] usb 3-1: Manufacturer: syz [ 483.217557][ T12] usb 3-1: SerialNumber: syz 12:06:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x2, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x220, 0x0, "02005efe8d87f8ac00c639665b42d8646a614ad76143efc1", "67cc09ae1b0205a479c6f185807d54bc8c0d8839b0b4007a00"}}}}}}, 0x0) prctl$PR_GET_SECCOMP(0x15) [ 483.414783][ T9771] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 483.419788][ T12] usb 3-1: can't set config #1, error -71 [ 483.468074][ T12] usb 3-1: USB disconnect, device number 3 [ 483.482007][ T4898] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 483.514304][ T9774] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. 12:06:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xfffffffbffff7fff}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() socket$pppl2tp(0x18, 0x1, 0x1) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="4ce200ed263fc6d53f058734ccc5ac3589c9fd16c38f894253d1c371a61285e4f03e37ed657fe76c96af64c5125eb345474141460c0400000005834af40957e90c8a5303f99ed06091824897c0ca098fb8ed79d84b85f8fd6dabdc91a54b8ed9fd62c4e10e40721012306bb9dbabc4c6560e13114bb4db62ade40807dfd9f517d5e3408370d8705a825d3a2002148ae3fe7f45eed91bf9868c6c1c9b0800000000000000c695809100f49a46c1bc69541aa381e54b1ba8901b42e21684e3f320affef7e1261bfc6cfb4c3b27b76a43c148855c053224121e55d679674e56b170ff76a6d7d4204be1de2d78431e60f2773949fc6ca2a25ee9b2688a48b382eb256b56e1c96b84ef9c3ad43e297ce04e23e25fc71135d5fc5e1d6928f7529d4d5ca1c581038174ca8fbaadb75ddac4f68613ad03214ab90b544b61a7ae41417ca0c78c3873a2489362fb197e6f534ab134378ba47121f5c3609801b068bdca43df70d78bea3f9e2ce2a0adb16e3e55f2dd1ce8453853e933db6bb4228f667d2254fc7f96b0910c9130847240acd8b22a559baadbe60c455e527f8ac2890520f08da11adb1ad2d6ecf661"], 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$vhost_msg_v2(r1, &(0x7f0000000500)={0x2, 0x0, {&(0x7f00000002c0)=""/163, 0xa3, &(0x7f0000000100)=""/91}}, 0x48) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "d0dda952daf43c08a4bcd60a6445964f031512956da90ef6e14590a6fd7becc35f971234e4464e686bd9fbb43dde35902645b25d7051dbc50630b90721d0d4d91afc9243afe5543ab07fc6f1a432fa00"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x1d, 0x0, "d0dda952daf43c08a4bcd60a12956da90ef6e14590a6fd7becc35f971234ff464e686bd9fbb43dde35902645b25d7051dbc50630b90721d0d4d91afc9243afe55401000000f1a432fa00"}, 0xd8) chdir(&(0x7f0000000280)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x14000004, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x3, 0xffffffffffffffff) write$P9_RWRITE(r4, &(0x7f0000000180)={0xb, 0x77, 0x2, 0x1000}, 0xb) [ 483.712664][ T9780] sit: Src spoofed 0.0.0.2/2002::200:5efe:141.135.248.172 -> 224.0.0.1/c6:3966:5b42:d864:6a61:4ad7:6143:efc1 [ 483.759395][ T4898] usb 1-1: Using ep0 maxpacket: 8 [ 483.765880][ T9780] sit: Src spoofed 0.0.0.2/2002::200:5efe:141.135.248.172 -> 224.0.0.1/c6:3966:5b42:d864:6a61:4ad7:6143:efc1 [ 483.881786][ T4898] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 483.890178][ T4898] usb 1-1: config 0 has no interface number 0 [ 483.896440][ T4898] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 483.907800][ T4898] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 483.917996][ T4898] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 8 12:06:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00da025b871efd59aba87ea1a94b581ee0c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="ac7a2cd16579ecc433ea27f0c3a31984c5e51f74473e7ebdc7aba7aaa7eade0c45"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_bond\x00'}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000200)=0x1800000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000140)) [ 483.927990][ T4898] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 483.937255][ T4898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.135487][ T4898] usb 1-1: config 0 descriptor?? 12:06:21 executing program 0: gettid() perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x20805) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14f) fchown(0xffffffffffffffff, 0x0, 0x0) unshare(0x600) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r1, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000180)='geneve0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00'}) setsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000400)="fc82b6de56d0aea5fc166846e35168ca5bf182eb7abbd06082b4b3b40291b879e8ab54c8ba74c29aefa488bfe8c0ce6c7a3f75501bfab7e0dfe8ee56fcd6cb684039bad2438be6df1cec529cf827f132d54aa94220a8ef04cb299099443aebb02f067695f9156a3fc346fded7e5c6caec3d835d76a324bf46cda13b16025485131f5f07db711b8f9138c91d062e5d818f5ad95953cb4ca8caa967aa8e60f93367f090a1b8dcb46e509e4bf9ab3e575dd8c9e6776b6a120ac2101eee0", 0xbc) [ 484.200000][ T4898] usb 1-1: can't set config #0, error -71 [ 484.217169][ T4898] usb 1-1: USB disconnect, device number 11 12:06:21 executing program 2: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000140)=[{0x1, 0x2, {0x0, 0xf0, 0x3}, {0x2, 0x1, 0x1}, 0xfe, 0xff}, {0x1, 0x0, {0x2, 0x1}, {}, 0x0, 0xfe}, {0x0, 0x0, {0x0, 0x0, 0x2}, {0x2, 0x1, 0x1}, 0x1, 0xff}, {0x0, 0x3, {0x0, 0xf0, 0x2}, {0x0, 0xff, 0x1}, 0x2}, {0x1, 0x1, {0x1}, {0x1, 0xf0, 0x2}, 0x1fc, 0x7c}, {0x2, 0x1, {0x1, 0xff, 0x3}, {0x2, 0x1, 0x4}, 0x1, 0x2}], 0xc0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000040)={@none, 0x2e3}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r6, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x4}}}, 0x24}}, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={0x0, @xdp={0x2c, 0x1, 0x0, 0xb}, @can={0x1d, r6}, @phonet={0x23, 0x72, 0x20, 0x8}, 0x6, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000100)='ip_vti0\x00', 0x8, 0x10000, 0xf801}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x100, 0xb5481f3e129391aa) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000000010104000000000000010000000000240002801400014a8008000100ffffffff0c000280050001003a00"/57], 0x38}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 484.441253][ C0] sd 0:0:1:0: [sg0] tag#187 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 484.451855][ C0] sd 0:0:1:0: [sg0] tag#187 CDB: Test Unit Ready [ 484.458433][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.468353][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.478294][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.488174][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.498052][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.507927][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.517836][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.527719][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.537616][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.547471][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.557705][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.567580][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 484.577426][ C0] sd 0:0:1:0: [sg0] tag#187 CDB[c0]: 00 00 00 00 00 00 00 00 12:06:21 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x4004010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$sock(r1, &(0x7f0000000740)={&(0x7f0000000340)=@xdp={0x2c, 0x2, r5, 0x2f}, 0x80, &(0x7f0000000200)=[{&(0x7f00000003c0)="3fc00184f54f341e3c9d6788bf52ef24e83df9457e3b54d494163f6b32314fdef9189343d8b05d33c9cecb2476add1688107021dadec291aef788b4f476582d0d04e575f96511e61e6ac36ac0fb42092bc55e2869ebfe0b49f12341a78903bf46d69cd0f930524f06f84aa3cd0f9533c98f093ac5469afa130fa5a05a255d450943d83f5a79f05d8f500e95dcdb8ed8e4cd98523a73eb182ba2a2790b999c578297ca2cf8747a826b05ff52aa71868ebe1e6ba0d33b52f28f1d93b60726c0f8120cddf1ac1", 0xc5}, {&(0x7f0000000500)="fc8b84789a7179c72cb20d0776d70390bba88943f9d3367dd9730449102258daace201d3ce8442d911e3f62d9523a132b58a4a0db5b0e9f8d19b8a3cb0ceb424f33ed7cb5b98fa036b335d6616a4eed44dd999ff7d02ba368ad849150c43a49b1f5e06b91c63b652131dddeeff719c96679ca96c63616b6de69f34089c5b0afb24c8187bd3b394bc042536bbc97eba04", 0x90}, {&(0x7f00000005c0)="645ee8a988709d64ff9fba6f6903c902bdb79828581c23086b65819d279b1c8bf156d0e1a2407ece57a5a40e588aec03e1c2eed3b1cad826aeeee4b41672f7182e4c778dfc51f454f517bc6be6bea92b929a8e157958e4bd0cef027f9f9b1fe7830608de7278587ebc4d68dc500343589c6802f426fdc9460c8083175f0fbec91e436b1994b1995c2db0dc14e8bf3acd0245bbfde3e5d28b8df688a779b06877366119313c53678958f04a01162cd2082d0df7869d96a726e5cfbfbaec91fd1bfc93cb9d81a44af05c487a24f997fc406301bff399b6a88168b2e1490e5855b73c373842786c1f92", 0xe8}, {&(0x7f00000006c0)="67bb5bfc604d6ff38188292e382a41766da16131dbac078078d37d05aa2c0bfd9cf7a27196a7b64d0d92c56ae3e33af48e0480433435ef07762270b066e11cc3b467f56640029e273962aa429b7b44cfbffdd1153c4b4745bfa4ff2237bcff0c469ac2a9a327e26d094a52347bf2b4f8710bf9f3c4a422d68382e326f35011", 0x7f}], 0x4}, 0x4040000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f00000002c0)={{0x81, 0x2b}, {0x1, 0x3}, 0x0, 0x2}) 12:06:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x4004010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$sock(r1, &(0x7f0000000740)={&(0x7f0000000340)=@xdp={0x2c, 0x2, r5, 0x2f}, 0x80, &(0x7f0000000200)=[{&(0x7f00000003c0)="3fc00184f54f341e3c9d6788bf52ef24e83df9457e3b54d494163f6b32314fdef9189343d8b05d33c9cecb2476add1688107021dadec291aef788b4f476582d0d04e575f96511e61e6ac36ac0fb42092bc55e2869ebfe0b49f12341a78903bf46d69cd0f930524f06f84aa3cd0f9533c98f093ac5469afa130fa5a05a255d450943d83f5a79f05d8f500e95dcdb8ed8e4cd98523a73eb182ba2a2790b999c578297ca2cf8747a826b05ff52aa71868ebe1e6ba0d33b52f28f1d93b60726c0f8120cddf1ac1", 0xc5}, {&(0x7f0000000500)="fc8b84789a7179c72cb20d0776d70390bba88943f9d3367dd9730449102258daace201d3ce8442d911e3f62d9523a132b58a4a0db5b0e9f8d19b8a3cb0ceb424f33ed7cb5b98fa036b335d6616a4eed44dd999ff7d02ba368ad849150c43a49b1f5e06b91c63b652131dddeeff719c96679ca96c63616b6de69f34089c5b0afb24c8187bd3b394bc042536bbc97eba04", 0x90}, {&(0x7f00000005c0)="645ee8a988709d64ff9fba6f6903c902bdb79828581c23086b65819d279b1c8bf156d0e1a2407ece57a5a40e588aec03e1c2eed3b1cad826aeeee4b41672f7182e4c778dfc51f454f517bc6be6bea92b929a8e157958e4bd0cef027f9f9b1fe7830608de7278587ebc4d68dc500343589c6802f426fdc9460c8083175f0fbec91e436b1994b1995c2db0dc14e8bf3acd0245bbfde3e5d28b8df688a779b06877366119313c53678958f04a01162cd2082d0df7869d96a726e5cfbfbaec91fd1bfc93cb9d81a44af05c487a24f997fc406301bff399b6a88168b2e1490e5855b73c373842786c1f92", 0xe8}, {&(0x7f00000006c0)="67bb5bfc604d6ff38188292e382a41766da16131dbac078078d37d05aa2c0bfd9cf7a27196a7b64d0d92c56ae3e33af48e0480433435ef07762270b066e11cc3b467f56640029e273962aa429b7b44cfbffdd1153c4b4745bfa4ff2237bcff0c469ac2a9a327e26d094a52347bf2b4f8710bf9f3c4a422d68382e326f35011", 0x7f}], 0x4}, 0x4040000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f00000002c0)={{0x81, 0x2b}, {0x1, 0x3}, 0x0, 0x2}) 12:06:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x4004010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$sock(r1, &(0x7f0000000740)={&(0x7f0000000340)=@xdp={0x2c, 0x2, r5, 0x2f}, 0x80, &(0x7f0000000200)=[{&(0x7f00000003c0)="3fc00184f54f341e3c9d6788bf52ef24e83df9457e3b54d494163f6b32314fdef9189343d8b05d33c9cecb2476add1688107021dadec291aef788b4f476582d0d04e575f96511e61e6ac36ac0fb42092bc55e2869ebfe0b49f12341a78903bf46d69cd0f930524f06f84aa3cd0f9533c98f093ac5469afa130fa5a05a255d450943d83f5a79f05d8f500e95dcdb8ed8e4cd98523a73eb182ba2a2790b999c578297ca2cf8747a826b05ff52aa71868ebe1e6ba0d33b52f28f1d93b60726c0f8120cddf1ac1", 0xc5}, {&(0x7f0000000500)="fc8b84789a7179c72cb20d0776d70390bba88943f9d3367dd9730449102258daace201d3ce8442d911e3f62d9523a132b58a4a0db5b0e9f8d19b8a3cb0ceb424f33ed7cb5b98fa036b335d6616a4eed44dd999ff7d02ba368ad849150c43a49b1f5e06b91c63b652131dddeeff719c96679ca96c63616b6de69f34089c5b0afb24c8187bd3b394bc042536bbc97eba04", 0x90}, {&(0x7f00000005c0)="645ee8a988709d64ff9fba6f6903c902bdb79828581c23086b65819d279b1c8bf156d0e1a2407ece57a5a40e588aec03e1c2eed3b1cad826aeeee4b41672f7182e4c778dfc51f454f517bc6be6bea92b929a8e157958e4bd0cef027f9f9b1fe7830608de7278587ebc4d68dc500343589c6802f426fdc9460c8083175f0fbec91e436b1994b1995c2db0dc14e8bf3acd0245bbfde3e5d28b8df688a779b06877366119313c53678958f04a01162cd2082d0df7869d96a726e5cfbfbaec91fd1bfc93cb9d81a44af05c487a24f997fc406301bff399b6a88168b2e1490e5855b73c373842786c1f92", 0xe8}, {&(0x7f00000006c0)="67bb5bfc604d6ff38188292e382a41766da16131dbac078078d37d05aa2c0bfd9cf7a27196a7b64d0d92c56ae3e33af48e0480433435ef07762270b066e11cc3b467f56640029e273962aa429b7b44cfbffdd1153c4b4745bfa4ff2237bcff0c469ac2a9a327e26d094a52347bf2b4f8710bf9f3c4a422d68382e326f35011", 0x7f}], 0x4}, 0x4040000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f00000002c0)={{0x81, 0x2b}, {0x1, 0x3}, 0x0, 0x2}) 12:06:22 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000200)=0x8) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001500)=""/241, 0xf1}, {&(0x7f0000001600)=""/102, 0x66}, {&(0x7f0000001680)=""/75, 0x4b}], 0x3}, 0x1}, {{&(0x7f0000001740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)=[{&(0x7f00000017c0)=""/40, 0x28}, {&(0x7f0000001800)=""/218, 0xda}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002940)=""/68, 0x44}, 0x3f}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a40)=""/76, 0x4c}, {&(0x7f0000002ac0)=""/52, 0x34}, {&(0x7f0000002b00)=""/9, 0x9}, {&(0x7f0000002b40)=""/227, 0xe3}, {&(0x7f0000002c40)=""/241, 0xf1}], 0x5, &(0x7f0000002dc0)=""/54, 0x36}, 0x80000001}, {{&(0x7f0000002e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=""/76, 0x4c}, 0x6}], 0x4, 0x40010060, 0x0) connect$pppl2tp(r2, &(0x7f0000003040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x3, 0x4, 0x3, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x3a) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x4f) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$CHAR_RAW_PBSZGET(r2, 0x127b, &(0x7f0000000240)) r5 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x200001, 0x101) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000280)) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x2400, 0x27, 0x4}, 0x18) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f00000001c0)={0x1, 0x3, 0x2}) getsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x4, 0x802}}, 0x2e) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000480)={0x1, 0x0, 0x1000, 0xb, &(0x7f0000000340)="46d37375ce18a645511db5", 0xe9, 0x0, &(0x7f0000000380)="5b2dee0a8c6ac6bf48122cd873411607a60839b3f0a815d8b154ce154097e5ef0146d192ee329a362bf35d1d1088188d04f58f8424b0680fab35000f639e2051efa1b83e105f22f86eee8ebc88abc6c6f8e7179ff5365e15c1af45ae05e4d502343b24deecd2c321b2faf9ae9039fbef5b6fd4315ed48c7a761e9deb9b484b1a550f146e56a7a75b8975a76c99d31f4776e6d05bce18fe7d1624871d2194cb487934e1b314e62e3e0997aabc606de664e323daaa5d08a615a22fd57fd0497097dfc58c37ea3dfc415e29f8e16f98ffda4e56d60c22c4c1fec8b1fc594ac600e8acfa1081f338c54bdc"}) close(r4) 12:06:22 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x4004010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$sock(r1, &(0x7f0000000740)={&(0x7f0000000340)=@xdp={0x2c, 0x2, r5, 0x2f}, 0x80, &(0x7f0000000200)=[{&(0x7f00000003c0)="3fc00184f54f341e3c9d6788bf52ef24e83df9457e3b54d494163f6b32314fdef9189343d8b05d33c9cecb2476add1688107021dadec291aef788b4f476582d0d04e575f96511e61e6ac36ac0fb42092bc55e2869ebfe0b49f12341a78903bf46d69cd0f930524f06f84aa3cd0f9533c98f093ac5469afa130fa5a05a255d450943d83f5a79f05d8f500e95dcdb8ed8e4cd98523a73eb182ba2a2790b999c578297ca2cf8747a826b05ff52aa71868ebe1e6ba0d33b52f28f1d93b60726c0f8120cddf1ac1", 0xc5}, {&(0x7f0000000500)="fc8b84789a7179c72cb20d0776d70390bba88943f9d3367dd9730449102258daace201d3ce8442d911e3f62d9523a132b58a4a0db5b0e9f8d19b8a3cb0ceb424f33ed7cb5b98fa036b335d6616a4eed44dd999ff7d02ba368ad849150c43a49b1f5e06b91c63b652131dddeeff719c96679ca96c63616b6de69f34089c5b0afb24c8187bd3b394bc042536bbc97eba04", 0x90}, {&(0x7f00000005c0)="645ee8a988709d64ff9fba6f6903c902bdb79828581c23086b65819d279b1c8bf156d0e1a2407ece57a5a40e588aec03e1c2eed3b1cad826aeeee4b41672f7182e4c778dfc51f454f517bc6be6bea92b929a8e157958e4bd0cef027f9f9b1fe7830608de7278587ebc4d68dc500343589c6802f426fdc9460c8083175f0fbec91e436b1994b1995c2db0dc14e8bf3acd0245bbfde3e5d28b8df688a779b06877366119313c53678958f04a01162cd2082d0df7869d96a726e5cfbfbaec91fd1bfc93cb9d81a44af05c487a24f997fc406301bff399b6a88168b2e1490e5855b73c373842786c1f92", 0xe8}, {&(0x7f00000006c0)="67bb5bfc604d6ff38188292e382a41766da16131dbac078078d37d05aa2c0bfd9cf7a27196a7b64d0d92c56ae3e33af48e0480433435ef07762270b066e11cc3b467f56640029e273962aa429b7b44cfbffdd1153c4b4745bfa4ff2237bcff0c469ac2a9a327e26d094a52347bf2b4f8710bf9f3c4a422d68382e326f35011", 0x7f}], 0x4}, 0x4040000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f00000002c0)={{0x81, 0x2b}, {0x1, 0x3}, 0x0, 0x2}) 12:06:22 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x2e, 0x40, 0xe, 0x20, 0x5c6, 0x9021, 0xdc5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0xaf, 0x0, 0x17, 0x18, 0xed}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:06:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x4004010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$sock(r1, &(0x7f0000000740)={&(0x7f0000000340)=@xdp={0x2c, 0x2, r4, 0x2f}, 0x80, &(0x7f0000000200)=[{&(0x7f00000003c0)="3fc00184f54f341e3c9d6788bf52ef24e83df9457e3b54d494163f6b32314fdef9189343d8b05d33c9cecb2476add1688107021dadec291aef788b4f476582d0d04e575f96511e61e6ac36ac0fb42092bc55e2869ebfe0b49f12341a78903bf46d69cd0f930524f06f84aa3cd0f9533c98f093ac5469afa130fa5a05a255d450943d83f5a79f05d8f500e95dcdb8ed8e4cd98523a73eb182ba2a2790b999c578297ca2cf8747a826b05ff52aa71868ebe1e6ba0d33b52f28f1d93b60726c0f8120cddf1ac1", 0xc5}, {&(0x7f0000000500)="fc8b84789a7179c72cb20d0776d70390bba88943f9d3367dd9730449102258daace201d3ce8442d911e3f62d9523a132b58a4a0db5b0e9f8d19b8a3cb0ceb424f33ed7cb5b98fa036b335d6616a4eed44dd999ff7d02ba368ad849150c43a49b1f5e06b91c63b652131dddeeff719c96679ca96c63616b6de69f34089c5b0afb24c8187bd3b394bc042536bbc97eba04", 0x90}, {&(0x7f00000005c0)="645ee8a988709d64ff9fba6f6903c902bdb79828581c23086b65819d279b1c8bf156d0e1a2407ece57a5a40e588aec03e1c2eed3b1cad826aeeee4b41672f7182e4c778dfc51f454f517bc6be6bea92b929a8e157958e4bd0cef027f9f9b1fe7830608de7278587ebc4d68dc500343589c6802f426fdc9460c8083175f0fbec91e436b1994b1995c2db0dc14e8bf3acd0245bbfde3e5d28b8df688a779b06877366119313c53678958f04a01162cd2082d0df7869d96a726e5cfbfbaec91fd1bfc93cb9d81a44af05c487a24f997fc406301bff399b6a88168b2e1490e5855b73c373842786c1f92", 0xe8}, {&(0x7f00000006c0)="67bb5bfc604d6ff38188292e382a41766da16131dbac078078d37d05aa2c0bfd9cf7a27196a7b64d0d92c56ae3e33af48e0480433435ef07762270b066e11cc3b467f56640029e273962aa429b7b44cfbffdd1153c4b4745bfa4ff2237bcff0c469ac2a9a327e26d094a52347bf2b4f8710bf9f3c4a422d68382e326f35011", 0x7f}], 0x4}, 0x4040000) [ 486.489576][ T12] usb 3-1: new high-speed USB device number 4 using dummy_hcd 12:06:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x4004010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) [ 486.729321][ T12] usb 3-1: Using ep0 maxpacket: 32 12:06:23 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20400) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2a0001, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) dup(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="008081fffeffffaaaaaaaaaaaa00000000f0b0848940928683b69ff1060d27ffaf48a6d621af640bbd4e1b594377a937e1a42b67c574a328179d20e1fb3e185792a313f95e4f5c8777838d548be1c48725d3bb280cf41d0521798abf6ead23bf2c2d792847f289f08a667b56ffcc0fbdb6"], 0x26) r5 = signalfd(r4, &(0x7f00000000c0)={[0xdb]}, 0x8) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000100)) [ 486.850645][ T12] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 486.858809][ T12] usb 3-1: config 1 has no interface number 0 [ 486.865697][ T12] usb 3-1: config 1 interface 1 has no altsetting 0 12:06:23 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x4004010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x30}}, 0x0) [ 487.031034][ T12] usb 3-1: New USB device found, idVendor=05c6, idProduct=9021, bcdDevice=dc.5a [ 487.040574][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.048705][ T12] usb 3-1: Product: syz [ 487.053208][ T12] usb 3-1: Manufacturer: syz [ 487.057932][ T12] usb 3-1: SerialNumber: syz 12:06:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010008"], 0x3c}}, 0x4004010) 12:06:24 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20400) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2a0001, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) dup(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="008081fffeffffaaaaaaaaaaaa00000000f0b0848940928683b69ff1060d27ffaf48a6d621af640bbd4e1b594377a937e1a42b67c574a328179d20e1fb3e185792a313f95e4f5c8777838d548be1c48725d3bb280cf41d0521798abf6ead23bf2c2d792847f289f08a667b56ffcc0fbdb6"], 0x26) r5 = signalfd(r4, &(0x7f00000000c0)={[0xdb]}, 0x8) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000100)) 12:06:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 12:06:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005072a369fb10000000005000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 12:06:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000200ffffffff0000000008000100736671"], 0x74}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000660007c8370000000000810000000000af9ffe13b69ca6772fc1de166da0289f54cd999d3fca0a132826ca486dbbdcaf5f0f2982fcdabff1f701f214717ba40ef9ec4fb900b753674433b029c1f8da8f8f4896e15c", @ANYRES32=r3, @ANYRES16=r4], 0x34}}, 0x0) r5 = socket(0x2b, 0x400000100080003, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x2e7, 0x0) 12:06:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) [ 489.406970][ T12] usb 3-1: USB disconnect, device number 4 12:06:26 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20400) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2a0001, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) dup(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="008081fffeffffaaaaaaaaaaaa00000000f0b0848940928683b69ff1060d27ffaf48a6d621af640bbd4e1b594377a937e1a42b67c574a328179d20e1fb3e185792a313f95e4f5c8777838d548be1c48725d3bb280cf41d0521798abf6ead23bf2c2d792847f289f08a667b56ffcc0fbdb6"], 0x26) r5 = signalfd(r4, &(0x7f00000000c0)={[0xdb]}, 0x8) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000100)) [ 489.673816][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.718099][ T9878] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.779353][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.792892][ T9883] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 12:06:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 12:06:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 12:06:27 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) 12:06:27 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) io_setup(0x0, 0x0) 12:06:27 executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20400) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2a0001, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) splice(r3, 0x0, r0, 0x0, 0x10000, 0x0) dup(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="008081fffeffffaaaaaaaaaaaa00000000f0b0848940928683b69ff1060d27ffaf48a6d621af640bbd4e1b594377a937e1a42b67c574a328179d20e1fb3e185792a313f95e4f5c8777838d548be1c48725d3bb280cf41d0521798abf6ead23bf2c2d792847f289f08a667b56ffcc0fbdb6"], 0x26) r5 = signalfd(r4, &(0x7f00000000c0)={[0xdb]}, 0x8) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000100)) 12:06:27 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x109041, 0x0) 12:06:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1, 0x0, 0xffffffff}, 0x8) ioctl$sock_inet_SIOCSARP(r0, 0x891b, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @local}}) 12:06:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) close(r0) 12:06:28 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newsa={0x148, 0x10, 0x1, 0x70bd2c, 0x3, {{@in=@loopback, @in6=@mcast1, 0x4e24}, {@in6=@private1, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, [], 0xb, 0x0}, {}, {}, {0x0, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_val={0x10, 0xa, {0x0, 0x70bd2b}}]}, 0x148}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) recvmsg(r4, &(0x7f00000004c0)={&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000040)=""/59, 0x3b}], 0x2, &(0x7f00000003c0)=""/255, 0xff}, 0x40010141) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) 12:06:28 executing program 2: r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000740)={{r2}, r3, 0x0, @inherit={0x78, &(0x7f00000002c0)={0x1, 0x6, 0x100000001, 0x96d5, {0x2, 0x5, 0x800, 0x403c73ad, 0x101}, [0x2, 0x7ff, 0x7, 0xac, 0xfffffffeffffffff, 0x4]}}, @subvolid=0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'macsec0\x00', @random="c88f8d56cd36"}) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000040)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', @local}) 12:06:29 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000180)=0x9, 0x4) [ 492.213984][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 492.382351][ T9932] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 12:06:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100006c8c6740f60d21004bd1000000010902120001000000000904d93b6301d1e9be"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000000004800"]}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x22, 0xe7, {0xe7, 0xb, "0e104ae62296f8a02400e49a074c68de857dafc01f8fc5313d91fad103a668531d52d6093cc677146505afa53519f0febb6065099699178ac0b5867bfabe10404c153c73e5eb40c707ca308a2310858503213cf2ee9bbe892f6ef459c164a73b6e30c6ae4b95596ae0661a94d978a1bd989b48d14ae3e60eadd62ed5675595d23637c9c2c2e93bc55f452d7de86bf9ba90075a2dc9bb0989c19b582dd230ed228ba2e4d7e055d59d5bff42ab14b75c818d9ddce810cd4e78e1727e6eb9f9e60e06a6bbb3a846baa5f582e8f2fcb7253bc69732a76a52ca05217d508aa56172b419baf4c495"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x20, 0x15, 0x5e, "bb9e88651157dc56603d29b4e483f795beb66ee743ff95bb2925eae3b1595de71fbe4119e21b05891a716844c049ca3d09c178eccd82f4f32a36609f53ee522bb54b61ce6b1cb343195b5d72870eab4b4e4bee6782457ea88ffcb1d03031"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031d"], 0x0, 0x0}, 0x0) [ 492.439334][ T9932] device veth1_macvtap left promiscuous mode [ 492.445505][ T9932] device macsec0 entered promiscuous mode 12:06:29 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) 12:06:29 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 12:06:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd26, 0x25dfdbfb, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c405}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffff7f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020020000000000000000000"], 0xb8}, 0x1, 0xfffff000}, 0x0) [ 493.159282][ T9608] usb 2-1: new high-speed USB device number 11 using dummy_hcd 12:06:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) fchmod(0xffffffffffffffff, 0x0) [ 493.334199][ T9954] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 493.382083][ T9955] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 12:06:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000010000108000000000000000004000a00", @ANYRES32=r4, @ANYBLOB='\x00\x00'], 0x20}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)) write$capi20(r7, &(0x7f00000000c0)={0x10, 0x8, 0x1, 0x3, 0x0, 0x1}, 0x10) [ 493.522040][ T9608] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 493.531239][ T9608] usb 2-1: config 0 has no interface number 0 [ 493.537489][ T9608] usb 2-1: too many endpoints for config 0 interface 217 altsetting 59: 99, using maximum allowed: 30 [ 493.549044][ T9608] usb 2-1: config 0 interface 217 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 493.562635][ T9608] usb 2-1: config 0 interface 217 has no altsetting 0 12:06:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r2}}, 0x48) [ 493.569824][ T9608] usb 2-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b [ 493.579007][ T9608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.758280][ T9608] usb 2-1: config 0 descriptor?? [ 493.787237][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 12:06:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) 12:06:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000400)={0xc, @capture={0x0, 0x0, {0x80000001, 0x7}, 0x6, 0x8}}) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x8000810}, 0x40400d1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [0xc0000100, 0x0, 0x3, 0x2, 0xc001001b]}) write$USERIO_CMD_REGISTER(r4, &(0x7f00000003c0)={0x0, 0xe}, 0x2) dup2(r6, r5) fcntl$setflags(r1, 0x2, 0x1) [ 494.221116][ T9608] usb 2-1: string descriptor 0 read error: -32 12:06:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) [ 494.352010][ T9608] usb 2-1: Cannot read MAC address [ 494.357737][ T9608] MOSCHIP usb-ethernet driver: probe of 2-1:0.217 failed with error -71 [ 494.446965][ T9976] kvm: vcpu 129: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. [ 494.478277][ T9608] usb 2-1: USB disconnect, device number 11 12:06:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x6000, 0x10000}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) 12:06:31 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xe5, 0x51, 0xf6, 0x40, 0x846, 0x9043, 0x7e9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xd9, 0xf8}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0x74ab, @loopback, 0x404}, 0x401, [0x56, 0x3add, 0x7, 0x3, 0x3, 0x70, 0x40, 0x3]}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="110100000000004026093333400000000101090224000100000000000000000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) [ 495.049721][ T9608] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 495.320143][ T8712] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 495.409919][ T9608] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 495.418194][ T9608] usb 2-1: config 0 has no interface number 0 [ 495.424669][ T9608] usb 2-1: too many endpoints for config 0 interface 217 altsetting 59: 99, using maximum allowed: 30 [ 495.435994][ T9608] usb 2-1: config 0 interface 217 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 495.449778][ T9608] usb 2-1: config 0 interface 217 has no altsetting 0 [ 495.456764][ T9608] usb 2-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b [ 495.466105][ T9608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.486735][ T9608] usb 2-1: config 0 descriptor?? [ 495.719774][ T8712] usb 3-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 495.729000][ T8712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.743847][ T8712] usb 3-1: config 0 descriptor?? 12:06:32 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:32 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x80002, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)={0x2, 0x5, 0x61}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000e10f51a588c8f92ebecf26d78d5698065a00074774270600f94721d41001a381", @ANYRESHEX, @ANYBLOB="7f218102810300001c0012000b0001006d616373656300e10b00020005000900000300000a0005c0100000000000000008"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x800) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 495.910695][ T9608] usb 2-1: string descriptor 0 read error: -71 [ 496.011215][ T9999] udc-core: couldn't find an available UDC or it's busy [ 496.018394][ T9999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 496.026624][ T9608] usb 2-1: Cannot read MAC address [ 496.032617][ T9608] MOSCHIP usb-ethernet driver: probe of 2-1:0.217 failed with error -71 12:06:32 executing program 3: sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="32cb5020c3386686c43b9d63b7505af894fd0e0704a50a17e4fdbdc297", 0x1d}, {&(0x7f0000000040)="1fdf102c3f0d02f8163da5bb8b462177989fc973f9d8f0886fc07fdbfd276ab3e525fac211c5c68ace8b121cf746501864128d0818bbdec32bbb327de61c6ea46a3492aa86df9c06902092fb2a5d478863b94fd3274b596ddcfe064581baafac6ae76a817125070cf4e5ab6dc77e24157e980344dfd6781732bb35d8bbafa4afd0f377324e2f807871e34dc84f2d1d9c939193800c7fae076ef516e55f4e34c0c2bca521d25eaf8124fd996b9f16c4dde72022024e04ce64b184930872fd3b4bf942cacc16128ab04ac4d1cf3d5aab09abecaf05870e3e7738a67c86be963dab094e4690939ac891262c212511ea0da2efc353246f6c39d2", 0xf8}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="f730bf572c2adf6c27a4739ce61bb5e8fb55b587048286c59ea25235b871ee0a31267afbf6bc9a0de8dbf287f4c3094f6890082342684b304744fd40ec912ea34126e3f51776a08f35ce21d9fe44112a85881255999e714a4c495fbb6524c452aa4e6d7faf6d867b8f6afe4c2bc776084811d18724fd7506a7da3ca8576232e792bd0c8df035bc8f03b167b2aeb1e20b7cd8cfdd4ffa0b3e8438562b6f32fd9efeb5c5abb3932a7b40e7613870c2345d8d2c3209baad481fd0ea15a91cc80a612c41f5", 0xc3}, {&(0x7f0000001240)="776dc71b", 0x4}, {&(0x7f0000001280)="1e1ac7bf22c9ec088605735563c3fc5d4b471c2b139319af1c033625d02b01fafb2f9eabd6fe80d5ce01c6bdca918cbd0bb9b6466d9e1da54fae005f628f9374279c25c18f08f51fbb1a139fdc826428c2c50172d4ac59c5789666bdd588bb9cf55372bcb0e2c21551c9104305ba4643e15c3cb9225ca13108311fd9baea9918fb47e994e49624310dc304a8e9e6ed8220a9ccb75cb11afc1125a05487df16b2d3ada0204723019010217d14ead4b5eaeeb827b83eb984c0ccf24d5092a7dba999002f5eb8b2e75921488bd833d0e9875f97a8da6b28c59d548fb9362ce2c58dd48a7a03c600f7d9", 0xe8}, {&(0x7f0000001380)="3fc75025a201908a6a91ce58bc43f5dbf91fef51be208062c6787346615c66549feeef343dab51d3a4f1a3ddafde7380389651c2a65d3dd41f537caacaf2e9c28bbb90843d7f54d5907b266f923a3ac2022461c6c21dbb3ace5b6804a72790a3bd579bad9c9c921bb6d33b4ea859642dd3fc9d8c0fb4dc60d30528a1bf6012693e8857ca4c22b7b49c911a5d9de5aae54ecbb7e056e3d2439149ce04973ecff90fbb1dceaf3fbf3e19533bc24e11", 0xae}], 0x7, &(0x7f00000014c0)=[@mark={{0x14, 0x1, 0x24, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}}], 0x1, 0x4080) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001540)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x1, 0x2100000, 0x2, 0x7, 0x400, 0x2}}, 0x50) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000015c0)={[0x9]}, 0x8, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = pidfd_getfd(r0, r0, 0x0) r2 = openat2(r1, &(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x18002, 0x12, 0x16}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10020400}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x28, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0xffffffffffffffff}}]}, 0x28}}, 0x0) pipe(&(0x7f00000017c0)) r4 = shmget(0x3, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000001800)=""/48) prctl$PR_SET_FPEXC(0xc, 0x80) r5 = dup2(r0, r2) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000001840)={0x2}) socket$nl_route(0x10, 0x3, 0x0) r6 = creat(&(0x7f0000001880)='./file0\x00', 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f00000018c0)=[@in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}, 0x7}], 0x1c) recvmsg$can_bcm(r6, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/137, 0x89}, {&(0x7f00000029c0)=""/99, 0x63}, {&(0x7f0000002a40)=""/154, 0x9a}], 0x4}, 0xd050fef30016bd92) r7 = syz_open_dev$audion(&(0x7f0000002b80)='/dev/audio#\x00', 0x2, 0x20000) write$UHID_INPUT(r7, &(0x7f0000002bc0)={0x8, {"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", 0x1000}}, 0x1006) [ 496.113644][ T9608] usb 2-1: USB disconnect, device number 12 [ 496.151111][ T8712] rtl8192cu: Chip version 0x10 12:06:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:33 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x24002) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "ec370275"}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x20, 0x9, 0xf4, {0xf4, 0x3, "da1442ee3be5aa1ba04bab0e115616bdbbec1db85e28fb848b0b58749c78992a216ac2acde68621e05b985081ef2532f76ea1b125c9a9911f4508c7e921033510150f8f8a14f0c3b2fe8cd454475bbcc6558837a9a3bf54f0aca0d3ac58b86536d6f7b63d79e858084557a61a2e3e754c4c3b9a2a620b6302d55fb40a02a0789a1b715574586075a40fab1d10a9d61a9538a0e8e9d5e5f1e73d5ee08f8829590af751c54fc2effbe89da73751f8c39647553d39deb0497b07317b56e6b3a8dbe28e243a2b7bd9bffa35d1e7614afa09afc47f63592f2bfd551f88d26ff9001fb6df6c54a927b0a157b256e4f5b900f1796ae"}}, &(0x7f0000000000)={0x0, 0x3, 0xfffffffffffffe80, @lang_id={0x4, 0x3, 0x801}}, &(0x7f00000001c0)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x8bf, 0xf007, 0x5, [0xffc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x9, 0x9b, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x6, 0x6, 0x20, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0xf, 0xfff}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "29e14ef8b8766418dcfd033468b390e0"}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1f, 0x8, 0x5, 0x5, "b9e0a96e", "38d5abba"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x1, 0x3, 0x80, 0x3f, 0x7}}}, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x20, 0x12, 0xa3, "98d45d4f86f17ab91780ddfc027694fa0d7419849b7cabec75e74dba708b3f810fe01ba50c840f7e9e125c39c950f77b6580dcf3493fb696a6907a92ee4ab7022c039b6b96b0b9f5f9839e73281bd5b2af3972e300cbcccdafb85ed87cce564c4a40854b3729f81d6b8093c72b49d4e71d363a4c7791e5bf179a90ec7c7c16b63bfddf8a10de141d6d1d19f51ff886748ed578fca9013bf9c4df1a23edf95a761ddcb4"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0xc0, 0x40}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0xc9}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000000680)={0x40, 0xb, 0x2, '\x00`'}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, "1a94"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x1}}) [ 496.550666][ T8712] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 496.559575][ T8712] rtl_usb: Too few input end points found 12:06:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 496.640071][ T8712] usb 3-1: USB disconnect, device number 5 12:06:33 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r0}}, 0x48) [ 496.941454][ T4898] usb 2-1: new high-speed USB device number 13 using dummy_hcd 12:06:33 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r0}}, 0x48) [ 497.199842][ T4898] usb 2-1: Using ep0 maxpacket: 8 [ 497.259832][ T8712] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 497.341030][ T4898] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 497.349514][ T4898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.359910][ T4898] usb 2-1: config 0 has no interface number 0 [ 497.366170][ T4898] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 143, changing to 11 [ 497.377647][ T4898] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1762, setting to 1024 12:06:34 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r0}}, 0x48) [ 497.389040][ T4898] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 497.402296][ T4898] usb 2-1: config 0 interface 52 has no altsetting 0 [ 497.409276][ T4898] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=5c.be [ 497.418477][ T4898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.434070][ T4898] usb 2-1: config 0 descriptor?? [ 497.461329][T10031] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 497.622405][ T8712] usb 3-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 497.633001][ T8712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.681871][ T8712] usb 3-1: config 0 descriptor?? [ 497.692876][T10031] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 497.733416][ T4898] input: USB Synaptics Device 06cb:0009 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input5 12:06:34 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 497.935241][T10057] udc-core: couldn't find an available UDC or it's busy [ 497.942989][T10057] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 497.995666][T10058] udc-core: couldn't find an available UDC or it's busy [ 498.002870][T10058] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 498.085513][ T9021] usb 2-1: USB disconnect, device number 13 12:06:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xe5, 0x51, 0xf6, 0x40, 0x846, 0x9043, 0x7e9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xd9, 0xf8}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0x74ab, @loopback, 0x404}, 0x401, [0x56, 0x3add, 0x7, 0x3, 0x3, 0x70, 0x40, 0x3]}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="110100000000004026093333400000000101090224000100000000000000000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 12:06:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 498.389785][ T8712] rtl_usb: reg 0xf0, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 498.398567][ T8712] rtl8192cu: Chip version 0x10 [ 498.487155][T10075] IPVS: ftp: loaded support on port[0] = 21 12:06:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 498.699604][ T8712] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 498.708362][ T8712] rtl_usb: Too few input end points found [ 498.763196][ T8712] usb 3-1: USB disconnect, device number 6 [ 498.869858][ T9021] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 499.058492][T10075] chnl_net:caif_netlink_parms(): no params data found 12:06:36 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 499.150317][ T8712] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 499.153416][ T9021] usb 2-1: Using ep0 maxpacket: 8 [ 499.231206][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.238600][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.248507][T10075] device bridge_slave_0 entered promiscuous mode [ 499.272476][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.280395][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.290871][T10075] device bridge_slave_1 entered promiscuous mode [ 499.325821][ T9021] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 499.334223][ T9021] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.344614][ T9021] usb 2-1: config 0 has no interface number 0 [ 499.350959][ T9021] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 143, changing to 11 [ 499.362439][ T9021] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 1762, setting to 1024 [ 499.373806][ T9021] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.386945][ T9021] usb 2-1: config 0 interface 52 has no altsetting 0 [ 499.393936][ T9021] usb 2-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=5c.be [ 499.403203][ T9021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.523190][ T8712] usb 3-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 499.528672][T10075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.532525][ T8712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.658567][T10075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.747919][ T8712] usb 3-1: config 0 descriptor?? [ 499.910006][ T9021] usb 2-1: config 0 descriptor?? [ 499.940935][ T9021] usb 2-1: can't set config #0, error -71 [ 499.978763][T10075] team0: Port device team_slave_0 added [ 500.021235][ T9021] usb 2-1: USB disconnect, device number 14 [ 500.073549][T10099] udc-core: couldn't find an available UDC or it's busy [ 500.080711][T10099] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 500.121969][T10075] team0: Port device team_slave_1 added [ 500.209971][ T8712] rtl8192cu: Chip version 0x10 [ 500.254057][T10075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.262003][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.288185][T10075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.364801][T10075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.372086][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.398636][T10075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.429723][ T8711] Bluetooth: hci3: command 0x0409 tx timeout [ 500.610439][ T8712] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 500.619410][ T8712] rtl_usb: Too few input end points found [ 500.641333][T10075] device hsr_slave_0 entered promiscuous mode [ 500.705564][T10075] device hsr_slave_1 entered promiscuous mode [ 500.726366][ T8712] usb 3-1: USB disconnect, device number 7 [ 500.770105][T10075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.777735][T10075] Cannot create hsr debugfs directory [ 501.206037][T10075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 501.267449][T10075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 501.311970][T10075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 501.351873][T10075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 501.787500][T10075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.824764][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 501.834044][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.856846][T10075] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.889943][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.901697][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.911214][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.918466][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.960789][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 501.970536][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.981143][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.990595][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.997831][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.007067][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.030412][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.060712][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.071947][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.123549][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.133363][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.144740][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.155342][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.165161][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.198847][T10075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.213873][T10075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.226157][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.236570][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.307921][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.315826][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.362355][T10075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.436372][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.448414][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.511177][ T8712] Bluetooth: hci3: command 0x041b tx timeout [ 502.538212][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.548880][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.573766][T10075] device veth0_vlan entered promiscuous mode [ 502.583224][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.593587][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.645348][T10075] device veth1_vlan entered promiscuous mode [ 502.742954][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.755297][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 502.765291][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.775844][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.802019][T10075] device veth0_macvtap entered promiscuous mode [ 502.824907][T10075] device veth1_macvtap entered promiscuous mode [ 502.906858][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.919069][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.928970][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.939694][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.949738][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 502.960342][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.975317][T10075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.983536][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 502.993615][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.003612][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 503.014230][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.054605][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.066667][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.076766][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.087365][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.097440][T10075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.108044][T10075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.122937][T10075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.132151][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.142711][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 12:06:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) write$binfmt_elf64(r0, &(0x7f00000009c0)={{0x1b, 0x5b, 0x7, 0x7, 0x3f, 0x32, 0x35, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 12:06:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:40 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xe5, 0x51, 0xf6, 0x40, 0x846, 0x9043, 0x7e9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xd9, 0xf8}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0x74ab, @loopback, 0x404}, 0x401, [0x56, 0x3add, 0x7, 0x3, 0x3, 0x70, 0x40, 0x3]}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="110100000000004026093333400000000101090224000100000000000000000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 12:06:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000100)={{0x200, 0x80}, 0x5}, 0x10) r1 = gettid() tkill(r1, 0x10) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r1) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000000a00)=""/24, 0x18}, {&(0x7f0000000c80)=""/137, 0x89}, {&(0x7f0000000ac0)=""/148, 0x94}], 0x4}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x773}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 12:06:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@private=0xa010101, @broadcast, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x28, 0x2, {{}, [@TCA_NETEM_REORDER={0xc, 0x4}]}}}]}, 0x58}}, 0x0) 12:06:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:41 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x3, 0x30402) write$P9_RREADLINK(r5, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 504.309402][ T9608] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 504.590423][ T8712] Bluetooth: hci3: command 0x040f tx timeout [ 504.680969][ T9608] usb 3-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 504.690341][ T9608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 12:06:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) 12:06:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9a, &(0x7f0000000080), &(0x7f0000000200)=0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0xa49c0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delnexthop={0x40, 0x69, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4010) r5 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) dup3(r0, r1, 0x0) [ 504.760309][ T9608] usb 3-1: config 0 descriptor?? [ 505.007108][T10331] udc-core: couldn't find an available UDC or it's busy [ 505.014324][T10331] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:06:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) [ 505.153121][ T9608] rtl8192cu: Chip version 0x10 12:06:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="5f245542d6df5f49811d94cf49da3cb7bfcc46c1768bb317296ac4f0e849399751f1c0201018dbc31586fcd2f5ee6206e81182f70eff840c62f159cc9abad44286e0f2a7c4a05a6d97210153679c2eaf1b909903ee69d3a9c656fd34d51d1dc5a81c71825fbc672410f4c12287d406c528398802106607192852ee9c48f6560b32164079a8daccad47b0f9fc74d986bfd9f17b17f770ee1c69ae92a6f13451f3d4851d560d6e8762d33aff865902a69fe63c593231c422db9d22aeaab60208a5afb0cd", 0xc3}], 0x1, 0x2, 0x0, 0x2) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0xfffffff8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) modify_ldt$read(0x0, &(0x7f0000000300)=""/77, 0x4d) syz_usb_connect$uac1(0x0, 0xcd, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1f, 0x4, 0x5c, 0x9, "282eb4d40c15"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x401, 0xffff, 0x7, '.\aN~'}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x0, 0x8, "8152ef07f5a266"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0xde, 0x9, '\r'}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x43, 0x9, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "", "d04ad8"}, @format_type_i_discrete={0x8}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 12:06:42 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x3, 0x30402) write$P9_RREADLINK(r5, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 505.558652][ T9608] rtl_usb: Too few input end points found [ 505.604941][ T9608] usb 3-1: USB disconnect, device number 8 12:06:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) [ 505.754301][ T8711] usb 2-1: new high-speed USB device number 15 using dummy_hcd 12:06:42 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xe5, 0x51, 0xf6, 0x40, 0x846, 0x9043, 0x7e9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xd9, 0xf8}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0x74ab, @loopback, 0x404}, 0x401, [0x56, 0x3add, 0x7, 0x3, 0x3, 0x70, 0x40, 0x3]}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="110100000000004026093333400000000101090224000100000000000000000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 12:06:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 506.122348][ T8711] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 506.131375][ T8711] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 506.140826][ T8711] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 506.151173][ T8711] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.353551][ T8711] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.362950][ T8711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.371350][ T8711] usb 2-1: Product: syz [ 506.375657][ T8711] usb 2-1: Manufacturer: syz [ 506.380540][ T8711] usb 2-1: SerialNumber: syz 12:06:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) [ 506.562072][ T8712] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 506.708739][ T8715] Bluetooth: hci3: command 0x0419 tx timeout [ 506.780027][ T8711] usb 2-1: 0:2 : does not exist [ 506.836410][ T8711] usb 2-1: USB disconnect, device number 15 12:06:43 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x3, 0x30402) write$P9_RREADLINK(r5, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 12:06:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) [ 507.042163][ T8712] usb 3-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 507.051619][ T8712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.128953][ T8712] usb 3-1: config 0 descriptor?? 12:06:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) [ 507.379722][T10380] udc-core: couldn't find an available UDC or it's busy [ 507.386808][T10380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:06:44 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='vboxnet0md5sum\x00', 0x1) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb7, 0x0, &(0x7f0000000000)) [ 507.581918][ T8712] rtl8192cu: Chip version 0x10 12:06:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:44 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x20, 0x9, 0x6, 0x400, 0x1}}) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x45a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000180)={0x0, 0x0, 0x10, 0x1, 0x0, r2, 0x0, 0xc000002}]) [ 507.981478][ T8712] rtl_usb: Too few input end points found [ 508.049955][ T8712] usb 3-1: USB disconnect, device number 9 12:06:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:45 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x3, 0x30402) write$P9_RREADLINK(r5, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 508.298485][ T29] audit: type=1800 audit(1599826005.116:2): pid=10431 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15742 res=0 [ 508.386216][ T29] audit: type=1800 audit(1599826005.206:3): pid=10436 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15743 res=0 12:06:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:45 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xe5, 0x51, 0xf6, 0x40, 0x846, 0x9043, 0x7e9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xd9, 0xf8}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0x74ab, @loopback, 0x404}, 0x401, [0x56, 0x3add, 0x7, 0x3, 0x3, 0x70, 0x40, 0x3]}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="110100000000004026093333400000000101090224000100000000000000000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) 12:06:45 executing program 1: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0xfffffffe, {{0x2, 0x4e22, @broadcast}}}, 0x88) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f6486fc2f0300000076505d691b2e77063b70ea89ee86cfa1d60eb362d3490815993366fa32664ec4", @ANYRESHEX, @ANYRESDEC], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='dax\x00', 0x0, &(0x7f0000000100)=')/,\x00') 12:06:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000720ecf401e045140285b0000df000902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x49}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 509.100427][ T4898] usb 3-1: new high-speed USB device number 10 using dummy_hcd 12:06:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x3, 0x30402) 12:06:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 509.480339][ T4898] usb 3-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 509.489640][ T4898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.572271][ T4898] usb 3-1: config 0 descriptor?? [ 509.621165][ T12] usb 2-1: new high-speed USB device number 16 using dummy_hcd 12:06:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 509.818037][T10445] udc-core: couldn't find an available UDC or it's busy [ 509.825417][T10445] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 12:06:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) [ 509.914804][ T12] usb 2-1: no configurations [ 509.919842][ T12] usb 2-1: can't read configurations, error -22 [ 510.089474][ T4898] rtl8192cu: Chip version 0x10 12:06:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) [ 510.119500][ T12] usb 2-1: new high-speed USB device number 17 using dummy_hcd 12:06:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) [ 510.289875][ T4898] rtl_usb: Too few input end points found [ 510.320959][ T4898] usb 3-1: USB disconnect, device number 10 [ 510.401901][ T12] usb 2-1: no configurations [ 510.406757][ T12] usb 2-1: can't read configurations, error -22 [ 510.448888][ T12] usb usb2-port1: attempt power cycle 12:06:47 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xe5, 0x51, 0xf6, 0x40, 0x846, 0x9043, 0x7e9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xd9, 0xf8}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0x74ab, @loopback, 0x404}, 0x401, [0x56, 0x3add, 0x7, 0x3, 0x3, 0x70, 0x40, 0x3]}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="110100000000004026093333400000000101090224000100000000000000000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) 12:06:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) 12:06:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 12:06:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) [ 511.084771][ T8711] usb 3-1: new high-speed USB device number 11 using dummy_hcd 12:06:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}, 0x48) [ 511.179900][ T12] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 511.315973][ T12] usb 2-1: no configurations [ 511.320829][ T12] usb 2-1: can't read configurations, error -22 [ 511.453000][ T8711] usb 3-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 511.462424][ T8711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.499768][ T12] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 511.565270][ T8711] usb 3-1: config 0 descriptor?? [ 511.631507][ T12] usb 2-1: no configurations [ 511.636272][ T12] usb 2-1: can't read configurations, error -22 [ 511.678867][ T12] usb usb2-port1: unable to enumerate USB device [ 511.822011][T10495] udc-core: couldn't find an available UDC or it's busy [ 511.829469][T10495] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 512.041371][ T8711] rtl8192cu: Chip version 0x10 [ 512.243161][ T8711] rtl_usb: Too few input end points found [ 512.281811][ T8711] usb 3-1: USB disconnect, device number 11 12:06:49 executing program 1 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:49 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xe5, 0x51, 0xf6, 0x40, 0x846, 0x9043, 0x7e9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xd9, 0xf8}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0x74ab, @loopback, 0x404}, 0x401, [0x56, 0x3add, 0x7, 0x3, 0x3, 0x70, 0x40, 0x3]}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="110100000000004026093333400000000101090224000100000000000000000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) 12:06:49 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 12:06:49 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xe5, 0x51, 0xf6, 0x40, 0x846, 0x9043, 0x7e9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xd9, 0xf8}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0x74ab, @loopback, 0x404}, 0x401, [0x56, 0x3add, 0x7, 0x3, 0x3, 0x70, 0x40, 0x3]}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="110100000000004026093333400000000101090224000100000000000000000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) [ 512.951553][ T8711] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 512.952384][T10525] FAULT_INJECTION: forcing a failure. [ 512.952384][T10525] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 512.972653][T10525] CPU: 1 PID: 10525 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 512.981383][T10525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.991490][T10525] Call Trace: [ 512.994963][T10525] dump_stack+0x21c/0x280 [ 512.999440][T10525] should_fail+0x8b7/0x9e0 [ 513.003993][T10525] should_fail_usercopy+0x39/0x40 [ 513.009157][T10525] _copy_from_user+0x62/0x330 [ 513.013989][T10525] ? __msan_poison_alloca+0xf0/0x120 [ 513.019404][T10525] ucma_write+0x3c2/0x6e0 [ 513.023845][T10525] ? ucma_get_global_nl_info+0xe0/0xe0 [ 513.029446][T10525] vfs_write+0x6a3/0x17c0 [ 513.033893][T10525] ? __msan_poison_alloca+0xf0/0x120 [ 513.039278][T10525] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 513.045177][T10525] ? kmsan_get_metadata+0x116/0x180 [ 513.050480][T10525] ksys_write+0x275/0x500 [ 513.054956][T10525] ? __prepare_exit_to_usermode+0x16c/0x560 [ 513.060956][T10525] __se_sys_write+0x92/0xb0 [ 513.065555][T10525] __x64_sys_write+0x4a/0x70 [ 513.070359][T10525] do_syscall_64+0xad/0x160 [ 513.075020][T10525] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 513.080980][T10525] RIP: 0033:0x45d5b9 [ 513.084937][T10525] Code: Bad RIP value. [ 513.089060][T10525] RSP: 002b:00007f9f983d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 513.097629][T10525] RAX: ffffffffffffffda RBX: 00000000000386c0 RCX: 000000000045d5b9 [ 513.105690][T10525] RDX: 0000000000000048 RSI: 0000000020000240 RDI: 0000000000000003 [ 513.113731][T10525] RBP: 00007f9f983d4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 513.121775][T10525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.129829][T10525] R13: 000000000169fb6f R14: 00007f9f983d59c0 R15: 000000000118cf4c [ 513.350738][ T8711] usb 1-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 513.360187][ T8711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.470766][ T4898] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 513.479503][ T8711] usb 1-1: config 0 descriptor?? 12:06:50 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 513.729824][T10521] udc-core: couldn't find an available UDC or it's busy [ 513.736890][T10521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.860888][ T4898] usb 3-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 513.870155][ T4898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.924755][ T4898] usb 3-1: config 0 descriptor?? [ 513.990265][ T8711] rtl8192cu: Chip version 0x10 [ 514.199550][ T8711] rtl_usb: Too few input end points found [ 514.219956][T10528] udc-core: couldn't find an available UDC or it's busy [ 514.227003][T10528] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 514.298090][ T8711] usb 1-1: USB disconnect, device number 12 12:06:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) mkdirat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x1ff) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x38, 0x10, 0x800, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010000100000000000000000000000040", @ANYRES32=r3, @ANYBLOB="00000000000000003000128008000100767469002400028008000500ac1414bb080003000000000008000600000000000800040000000000"], 0x50}}, 0x0) [ 514.551502][ T4898] rtl8192cu: Chip version 0x10 [ 514.750722][ T4898] rtl_usb: Too few input end points found 12:06:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x2, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 514.792330][ T4898] usb 3-1: USB disconnect, device number 12 12:06:51 executing program 0: syz_usb_connect(0x4, 0x1cb, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb5, 0xfd, 0x95, 0x8, 0x2304, 0x212, 0x3d13, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b9, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x6, 0xa1, 0x3f, 0x56, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}}], [{{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x1, 0xf7, 0x6, [@generic={0x8, 0x11, "1f9f3adb47f2"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x48, 0x5, 0x6b, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x8001}]}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x1, 0xff, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x5ff, 0x8, 0x5, 0x0, [@generic={0x52, 0xe, "b844a4faf717ff9964cd6c1b347d0432748b7e56c17487f99a9f3406f2957b6705db579de760821bbc5f47b13fce5f7ddb6aaa7bd00067b0a6b8d258fd96105c2c206074bf516da822b3506cb4b47a12"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0xe1, 0x20, 0x80, [@generic={0x13, 0x22, "12868656724984e4a1924d451ccd5875ab"}, @generic={0xdf, 0x24, "927281c07c329d481f72bae608a706869ad43926d39f2ccd932dfd1220cbf66277cab11e0bb0ff244445d3232725d90613f54f5ba0f3210919f30d632bc8f56bb08fd184f27d8e91f413f1f8d2ca697e40214e7dde347e21fe1fbcace39162c7a049933049230d85baf8b37ab28f1e7ac28aa6a89f2d53709046d4506f833f44a61789ad94f4e3c45870de44432c44a9799dda18fa4821b1f5e5176d72c4a4fbc68d9617e254b8bb9f7a3087dcd48d2ab1a1088031a1b6f966dd6d8b8e64a92774881e628a86c9668992c468392039fcb172121613f563e16fbaf28644"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x11, 0x6, 0x5}}]}}]}}]}}, 0x0) 12:06:51 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0xe5, 0x51, 0xf6, 0x40, 0x846, 0x9043, 0x7e9d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xd9, 0xf8}}]}}]}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e24, 0x74ab, @loopback, 0x404}, 0x401, [0x56, 0x3add, 0x7, 0x3, 0x3, 0x70, 0x40, 0x3]}, 0x5c) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="110100000000004026093333400000000101090224000100000000000000000103010000092100000001220100090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write(r2, 0x0, 0x89, &(0x7f00000004c0)="893c8aa1eeea370d789f8083882f2ec3b466d0a6f76fec9173f13bfbd5369da591ad31cc9b0776ae7ba5eb926f9b5fd049b3e9b6c0c1e1eaba60edaf15fecf6d1214acc33955a2b0ebbe506e2dea211adacffee38179dc00eee087643908a74a1271ad1a63ff0eec7c19fbd3438b8819cccd10ededbd0297e47ce24539cac06e0970e5a6ad9087aacd") syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 12:06:51 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x3}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) 12:06:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x4, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) 12:06:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 515.609582][ T4898] usb 3-1: new high-speed USB device number 13 using dummy_hcd 12:06:52 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4461ff001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050019008d000000"], 0x44}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) recvfrom$inet(r2, &(0x7f0000000280)=""/109, 0x6d, 0x40, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) 12:06:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x6, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r1}}, 0x48) [ 515.992919][ T4898] usb 3-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=7e.9d [ 516.002292][ T4898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.072726][ T4898] usb 3-1: config 0 descriptor?? 12:06:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f0000000000)='$', 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 516.317573][T10568] udc-core: couldn't find an available UDC or it's busy [ 516.324931][T10568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 516.389765][ T4898] rtl8192cu: Chip version 0x10 [ 516.406814][T10591] ===================================================== [ 516.413803][T10591] BUG: KMSAN: uninit-value in ucma_connect+0x458/0xc30 [ 516.420670][T10591] CPU: 0 PID: 10591 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 516.429351][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.439417][T10591] Call Trace: [ 516.442745][T10591] dump_stack+0x21c/0x280 [ 516.447110][T10591] kmsan_report+0xf7/0x1e0 [ 516.451560][T10591] __msan_warning+0x58/0xa0 [ 516.456092][T10591] ucma_connect+0x458/0xc30 [ 516.460619][T10591] ? kmsan_get_metadata+0x116/0x180 [ 516.465847][T10591] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 516.471949][T10591] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 516.478045][T10591] ? _copy_from_user+0x221/0x330 [ 516.483008][T10591] ? kmsan_get_metadata+0x116/0x180 [ 516.488287][T10591] ucma_write+0x64d/0x6e0 [ 516.492652][T10591] ? ucma_get_global_nl_info+0xe0/0xe0 [ 516.498136][T10591] vfs_write+0x6a3/0x17c0 [ 516.502512][T10591] ? __msan_poison_alloca+0xf0/0x120 [ 516.507820][T10591] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 516.513648][T10591] ? kmsan_get_metadata+0x116/0x180 [ 516.518874][T10591] ksys_write+0x275/0x500 [ 516.523238][T10591] ? __prepare_exit_to_usermode+0x16c/0x560 [ 516.529312][T10591] __se_sys_write+0x92/0xb0 [ 516.533846][T10591] __x64_sys_write+0x4a/0x70 [ 516.538499][T10591] do_syscall_64+0xad/0x160 [ 516.543031][T10591] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.548935][T10591] RIP: 0033:0x45d5b9 [ 516.552830][T10591] Code: Bad RIP value. [ 516.556914][T10591] RSP: 002b:00007f9f983d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.565344][T10591] RAX: ffffffffffffffda RBX: 00000000000386c0 RCX: 000000000045d5b9 [ 516.573323][T10591] RDX: 0000000000000048 RSI: 0000000020000240 RDI: 0000000000000003 [ 516.581307][T10591] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 516.589296][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 516.597282][T10591] R13: 000000000169fb6f R14: 00007f9f983d59c0 R15: 000000000118cf4c [ 516.605285][T10591] [ 516.607624][T10591] Local variable ----cmd@ucma_connect created at: [ 516.614068][T10591] ucma_connect+0xde/0xc30 [ 516.618543][T10591] ucma_connect+0xde/0xc30 [ 516.622962][T10591] ===================================================== [ 516.629904][T10591] Disabling lock debugging due to kernel taint [ 516.636093][T10591] Kernel panic - not syncing: panic_on_warn set ... [ 516.642735][T10591] CPU: 0 PID: 10591 Comm: syz-executor.1 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 516.652817][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.662907][T10591] Call Trace: [ 516.666236][T10591] dump_stack+0x21c/0x280 [ 516.670682][T10591] panic+0x4d7/0xef7 [ 516.674637][T10591] ? add_taint+0x17c/0x210 [ 516.679125][T10591] kmsan_report+0x1df/0x1e0 [ 516.683664][T10591] __msan_warning+0x58/0xa0 [ 516.688199][T10591] ucma_connect+0x458/0xc30 [ 516.692730][T10591] ? kmsan_get_metadata+0x116/0x180 [ 516.697956][T10591] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 516.704059][T10591] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 516.710158][T10591] ? _copy_from_user+0x221/0x330 [ 516.715121][T10591] ? kmsan_get_metadata+0x116/0x180 [ 516.720345][T10591] ucma_write+0x64d/0x6e0 [ 516.724715][T10591] ? ucma_get_global_nl_info+0xe0/0xe0 [ 516.730191][T10591] vfs_write+0x6a3/0x17c0 [ 516.734565][T10591] ? __msan_poison_alloca+0xf0/0x120 [ 516.739866][T10591] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 516.745720][T10591] ? kmsan_get_metadata+0x116/0x180 [ 516.750947][T10591] ksys_write+0x275/0x500 [ 516.755308][T10591] ? __prepare_exit_to_usermode+0x16c/0x560 [ 516.761225][T10591] __se_sys_write+0x92/0xb0 [ 516.765762][T10591] __x64_sys_write+0x4a/0x70 [ 516.770382][T10591] do_syscall_64+0xad/0x160 [ 516.774904][T10591] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 516.780811][T10591] RIP: 0033:0x45d5b9 [ 516.784714][T10591] Code: Bad RIP value. [ 516.788801][T10591] RSP: 002b:00007f9f983d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.797225][T10591] RAX: ffffffffffffffda RBX: 00000000000386c0 RCX: 000000000045d5b9 [ 516.805207][T10591] RDX: 0000000000000048 RSI: 0000000020000240 RDI: 0000000000000003 [ 516.813196][T10591] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 516.821198][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 516.829207][T10591] R13: 000000000169fb6f R14: 00007f9f983d59c0 R15: 000000000118cf4c [ 516.838191][T10591] Kernel Offset: disabled [ 516.842515][T10591] Rebooting in 86400 seconds..