00000000000000e20f00000008000004000000000000000600000000000000640e000000000000070000000000000007000000000000000800000000000000ff010000690c0000ff7f000000c0000002000000", @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="e0ffffff00080000000000000200000000000000ff7f0000000000000600000080000000285d21407d73000000000000000000000300000000000000fffbffffffffffff0700000000000000090000000200000001000000000000000200000000000000ff0100000000000038bd0000000000000600000000000000080000000000000001000000400000002f00000000a0000065000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000000000000000000000060000000000000008000000000000000100000001000000280000000000000002000000000000001b0000000000000008000000000000000800000000000000050000000700000002000000000000000200000000000000050000000000000000000000000000001fb52778040244f9510000000000000007000000ff010000520000000060000001000100", @ANYBLOB="09000000050000000000000006000000000000000000000000000000030000000900000023242f000000000005000000000000000300000000000000020000000000000088cc201a0000000005000000000000000400000000000000050000000000000002000000000000002e0f000000000000b1000000000000000001000000000000b4924b0e07000000090000000040000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="41050000090000000000000004000000000000000800000000000000000000000000000005000000000000000300000000000000010000000000000003000000000000000300000002000000060000000000000008000000000000003f00000000000000c4000000000000000900000000000000080000000000000000800000f8ffffff020000000060000001000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000600000000000000810000000000000001000000000000000000000000080000"], 0x598) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000001580)={{}, {0x1, 0x5}, [{0x2, 0x5}, {0x2, 0x5, 0xee00}], {0x4, 0x2}, [{0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x0, 0xee01}, {0x8, 0x2, r5}, {0x8, 0x2, 0xee00}], {0x10, 0x6}, {0x20, 0x4}}, 0x6c, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x0, r7}]}, 0x2c, 0x2) getgroups(0x7, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee01, 0xee01, 0xee00, 0x0]) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="98050000f5ffffff", @ANYRES64=0x0, @ANYBLOB="050000000000000001000000000000005abe0000000000000300000000000000c80000000800000000000000000000007f000000000000000800000000000000040000000000000000100000000000000002000000000000e3fd0000fffbffff060000000020000009000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="02000000060000000000000003000000000000000000000000000000000000000104000004000000000000000300000000000000010000000000000003000000000000000200000005000000030000000000000017070000000000000600000000000000fcffffffffffffff0200000000000000ec0700000000000000000000ffffff7f020000000010000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffff0200000000000000030000000000000000000000000000000100000000010000900000000000000006000000000000000200000000000000010000000000000000000000000000000300000001000000020000000000000008000000000000000400000000000000fcffffffffffffff0500000000000000060000000000000003000000bfdb00000000010000a000002f070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000020000000000000006000000000000000180000000000000030000000500000023262d00000000000600000000000000030000000000000080000000000000000000000000000000e20f00000008000004000000000000000600000000000000640e000000000000070000000000000007000000000000000800000000000000ff010000690c0000ff7f000000c0000002000000", @ANYRES32=0xee00, @ANYRES32=r5, @ANYBLOB="e0ffffff00080000000000000200000000000000ff7f0000000000000600000080000000285d21407d73000000000000000000000300000000000000fffbffffffffffff0700000000000000090000000200000001000000000000000200000000000000ff0100000000000038bd0000000000000600000000000000080000000000000001000000400000002f00000000a0000065000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000000000000000000000060000000000000008000000000000000100000001000000280000000000000002000000000000001b0000000000000008000000000000000800000000000000050000000700000002000000000000000200000000000000050000000000000000000000000000001fb52778040244f9510000000000000007000000ff010000520000000060000001000100", @ANYBLOB="09000000050000000000000006000000000000000000000000000000030000000900000023242f000000000005000000000000000300000000000000020000000000000088cc201a0000000005000000000000000400000000000000050000000000000002000000000000002e0f000000000000b1000000000000000001000000000000b4924b0e07000000090000000040000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="41050000090000000000000004000000000000000800000000000000000000000000000005000000000000000300000000000000010000000000000003000000000000000300000002000000060000000000000008000000000000003f00000000000000c4000000000000000900000000000000080000000000000000800000f8ffffff020000000060000001000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000600000000000000810000000000000001000000000000000000000000080000"], 0x598) getresgid(&(0x7f00000022c0), &(0x7f0000002300), &(0x7f0000002340)=0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000002380)={{}, {}, [{0x2, 0x2}, {0x2, 0x2, r2}, {0x2, 0x1, 0xee00}, {0x2, 0x7}, {0x2, 0x7, r2}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x0, r2}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x6}, {0x8, 0x5, r5}, {0x8, 0x2, r9}], {0x10, 0x6}}, 0x7c, 0x3) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)) r10 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r10, 0x551f, 0x0) [ 1528.919186][T15485] vhci_hcd: invalid port number 0 08:51:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000077, 0x68181) umount2(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) 08:51:06 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000502d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1528.954303][T15485] vhci_hcd: invalid port number 0 08:51:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000080)={{0x1, 0x6, 0xeb9, 0xfffffffb, 'syz1\x00', 0xcc6}, 0x0, [0x2, 0x8, 0x80000001, 0x100, 0x1, 0x6, 0x3, 0x3ff, 0x7fff, 0x1, 0x6bf2, 0x7, 0x6, 0x0, 0x101, 0x401, 0x7, 0x1ff, 0x205b, 0x4, 0xffffffffffffef1d, 0x5, 0xfff, 0x7, 0x100, 0x20, 0xa05d, 0x0, 0x0, 0x24ea4023, 0x7, 0x6, 0xa28, 0x9, 0x1577, 0x4, 0x3, 0x5, 0x0, 0x8, 0xfffffffffffeffff, 0x5, 0x3, 0x1ff, 0x6, 0x0, 0x9, 0x5, 0x1, 0x9, 0xc61, 0x1, 0x3a83, 0x0, 0xf32f, 0xbb, 0x4, 0x8, 0x40, 0x8, 0x7, 0x246, 0x59ffb4b8, 0x2, 0xfff, 0xfffffffffffff606, 0xffffffff, 0x7f, 0x2, 0x80000000, 0x1ff, 0x8, 0x200, 0x8, 0x100000000, 0xffffffff, 0x7fff, 0x7, 0x7, 0x8, 0x3, 0xf1, 0x1000000000000000, 0x80, 0x1000, 0x3f, 0x0, 0x8000, 0x6, 0x5, 0x400, 0x5, 0x6, 0x4, 0x0, 0x4, 0x5, 0x2, 0xd762, 0x3ff, 0x1ff, 0x8d94, 0x7, 0x0, 0x0, 0x5ae4, 0x2, 0x3fffffff80, 0x1, 0x6, 0x7, 0x3, 0x0, 0xeb1c, 0x6, 0x8, 0x1, 0x3, 0x5, 0x20, 0x35c4, 0x6d141a22, 0x6, 0x100, 0x10001, 0x7fffffff, 0xfff, 0xdaf]}) [ 1529.007349][T15485] vhci_hcd: invalid port number 0 [ 1529.046526][T15485] vhci_hcd: invalid port number 0 [ 1529.078503][T15485] vhci_hcd: invalid port number 0 [ 1529.125442][T15485] vhci_hcd: invalid port number 0 [ 1529.145596][T15497] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1529.173965][T15489] vhci_hcd: invalid port number 0 [ 1529.179918][T15485] vhci_hcd: invalid port number 0 [ 1529.200109][T15500] vhci_hcd: invalid port number 0 [ 1529.217181][T15502] vhci_hcd: invalid port number 0 [ 1529.229414][T15497] device .719 entered promiscuous mode [ 1529.268854][T15506] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1529.307989][T15506] device .720 entered promiscuous mode 08:51:06 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000080)={0x1, 0x2, 0x3}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000180)={{0x8, 0x4e, 0x49, 0x3}, 'syz1\x00', 0x3a}) r6 = dup(r3) dup3(r6, r2, 0x80000) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffffffffffdcd) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00056a0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) 08:51:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) 08:51:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x68181) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x400002) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x550b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) r3 = dup(r2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0x8, 0x6, 0x2}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb5c1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb0a3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) 08:51:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="5f062103000000", @ANYRES16=r3, @ANYBLOB="000826bd7000fddbdf250f000000080031002000000005002a0000000200050035000900000008002b0080000000"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x800) 08:51:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x8300) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x6, 0x7fff, 0x2}) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) 08:51:06 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000503d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1529.410697][T15513] vhci_hcd: invalid port number 0 [ 1529.464619][T15522] vhci_hcd: invalid port number 0 08:51:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000c45) 08:51:06 executing program 3: r0 = gettid() ptrace(0x10, r0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x1, 0x7, 0x0, 0x2, 0x0, 0xffff, 0x242a0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0xc43f}, 0x80, 0x5, 0xfffffff9, 0x8, 0x3c, 0x5, 0x7}, r0, 0x7, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0x551f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2b9a, 0x200000) 08:51:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper, 0x2}) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) 08:51:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$apparmor_current(r3, &(0x7f0000000180)=@hat={'permhat ', 0x0, 0x5e, ['/dev/bus/usb/00#/00#\x00', '-]#\'\x00', '/dev/bus/usb/00#/00#\x00', '/\x00', '/dev/bus/usb/00#/00#\x00']}, 0x61) write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x0, 0x0, 0x3}}, 0x14) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000040)={0xb437}) 08:51:06 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000504d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1529.803224][T15537] vhci_hcd: invalid port number 0 [ 1529.833775][T15537] vhci_hcd: invalid port number 0 08:51:07 executing program 3: openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x1c5042, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x20000) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x6}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x11, r1, 0xb544a000) 08:51:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x4bc, 0x1, 0x5, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0xfff}, 0x6, 0x4, 0x8, 0x1, 0x20, 'syz1\x00', "ff5ab74cc0267198ad6146b628a80c7bdfe41adb432873af3d5a0b914593bc4b", "d774dc7f3c383b73369830275e5227a3e242589215454f6a7c2b7ca64ec2852f", [{0x3, 0xffc0, {0x2, 0xff}}, {0x0, 0x5, {0x1, 0x16db}}, {0x8, 0x8, {0x2, 0xff}}, {0x4, 0xe20, {0x0, 0x90}}, {0x0, 0xb97, {0x0, 0x9}}, {0x9, 0x8000, {0x0, 0x3}}, {0x2, 0xd00b, {0x2, 0x4fc}}, {0x207b, 0x1, {0x3}}, {0x0, 0x4, {0x73b1e0832ab79449, 0x1ff}}, {0x4, 0x8, {0x0, 0x100}}, {0xb8b5, 0x8efe, {0x2, 0x100}}, {0x0, 0x9, {0x3, 0xfffffffe}}, {0x5, 0x0, {0x2, 0x2}}, {0x3ff, 0x81, {0x3, 0xffffffff}}, {0x6, 0x2f6b, {0x3, 0xffffffc4}}, {0x0, 0x9, {0x0, 0x1ff}}, {0x1, 0x0, {0x3, 0x1}}, {0x81, 0x7, {0x1, 0x3}}, {0x4, 0x4, {0x1, 0x40}}, {0x1, 0x1f, {0x0, 0x10000}}, {0x100, 0xfffb, {0x0, 0xffffffff}}, {0x4, 0xad, {0x1, 0x3}}, {0x5, 0x5, {0x3, 0x1ff}}, {0x8, 0x7fff, {0x3, 0x5}}, {0x2, 0x833, {0x2, 0x9}}, {0x8, 0x7, {0x1, 0x3fc}}, {0x7d59, 0x4000, {0x1, 0x3}}, {0x800, 0x9, {0x1}}, {0x4, 0x5, {0x0, 0x2}}, {0x9, 0x1f, {0x3, 0x9}}, {0x81, 0xfff, {0x0, 0xffffffc0}}, {0x9, 0x59cd, {0x2, 0x8}}, {0x7fff, 0x3, {0x3, 0x9}}, {0xffff, 0x7d7, {0x1, 0x401}}, {0x8, 0x9, {0x3, 0x9}}, {0xffff, 0x9, {0x0, 0xfffffff8}}, {0x401, 0x200, {0x3, 0x341}}, {0x1000, 0x401, {0x0, 0x2}}, {0x3, 0x1000, {0x1, 0x80000001}}, {0x8001, 0x401, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x50b}, 0xf8, 0x0, 0xffff, 0x1000, 0x14, 'syz0\x00', "ee7ae2269372f9a377db35bd880cf98b22234a6d421ae2dd28a530f6d6644726", "beea683ee6017b9efc5f1da999ca2d4ed2a4bae01e9c5854d4be98347466d36e", [{0x8, 0x7fff, {0x0, 0x100}}, {0x401, 0x81, {0x3, 0x7}}, {0xfffd, 0xd3, {0x1, 0x401}}, {0xb704, 0x0, {0x1, 0x5}}, {0x1, 0x8, {0x3, 0x3}}, {0x5, 0xba, {0x2, 0x5b6}}, {0x8000, 0xfff7, {0x0, 0x100}}, {0x401, 0x2, {0x2, 0x80000000}}, {0x8, 0x42d, {0x3, 0x8}}, {0x5, 0x2, {0x0, 0x8001}}, {0x3, 0xab8, {0x0, 0x795}}, {0xffff, 0x8f43, {0x1}}, {0x1000, 0x0, {0x1, 0x40}}, {0x2, 0x16af, {0x1, 0x400}}, {0xd9, 0x2, {0x2, 0x33e4}}, {0xfff, 0x7, {0x2, 0x4}}, {0x8, 0x64, {0x3, 0x7}}, {0x6, 0x8, {0x1, 0x5}}, {0x7, 0x0, {0x0, 0x100000}}, {0x20, 0x2, {0x3, 0x5}}, {0x3, 0x7, {0x1, 0x2}}, {0x8000, 0x1c, {0x3, 0x6}}, {0x8000, 0x4, {0x3, 0x7}}, {0x3b9, 0x62d, {0x0, 0x5}}, {0x3, 0x2b6, {0x0, 0x8000}}, {0xff, 0x80, {0x3, 0x80000000}}, {0x1, 0x8000, {0x2}}, {0x6, 0x5, {0x3, 0x24000000}}, {0x0, 0x7, {0x1, 0xffffffe1}}, {0x1d20, 0x20, {0x2}}, {0x9, 0x1, {0x3, 0x6}}, {0x200, 0x401, {0x3, 0x3}}, {0x6, 0x200, {0x2, 0x2}}, {0x40, 0x8, {0x0, 0x40}}, {0x3, 0xfffa, {0x3, 0x2}}, {0x1, 0x4, {0x3}}, {0x9, 0x3, {0x0, 0x4}}, {0x6, 0x9, {0x0, 0x4934}}, {0x490, 0x7, {0x3, 0x3f}}, {0xbb5, 0x3, {0x2, 0x7}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4008040}, 0x1) 08:51:07 executing program 5: socket$isdn(0x22, 0x3, 0x11) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) [ 1529.887899][T15543] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1529.952273][T15543] device .721 entered promiscuous mode [ 1529.997758][T15550] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x2, 0x0, r5}, 0x14) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) [ 1530.047491][T15553] vhci_hcd: invalid port number 0 [ 1530.072919][T15550] device .722 entered promiscuous mode 08:51:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x16b081) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 08:51:07 executing program 4: r0 = socket(0x4, 0x4, 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x4, 0x0, [{0x2e3, 0x0, 0x30d8}, {0xaaf, 0x0, 0x8000}, {0xbef, 0x0, 0x8}, {0x3a0, 0x0, 0xfff}]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r6, 0xbd, 0x0, 0x71}, &(0x7f0000000180)=0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) [ 1530.120063][T15553] vhci_hcd: invalid port number 0 08:51:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f0000000000)=0x40) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:07 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000505d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x22141) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) 08:51:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7fff, 0x2}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) r3 = dup(r1) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000000), 0x4) [ 1530.290671][T15571] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x1, 0x3, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f0000000340)=[{r2, 0x550fb3a8527afa1d}], 0x1, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x80000001}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffffb}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x100}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x80) [ 1530.338041][T15571] device .723 entered promiscuous mode [ 1530.413081][T15580] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1530.502603][T15580] device .724 entered promiscuous mode 08:51:07 executing program 3: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x400000, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xe00}}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}], [{@appraise='appraise'}]}}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0x551f, 0x0) [ 1530.546925][T15588] vhci_hcd: invalid port number 0 08:51:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) kexec_load(0x4, 0xa, &(0x7f0000001940)=[{&(0x7f0000000340)="b1b9f0121897fa5a86eba88a46e8e6ff1beb427024a74b4ed3bb549389cbc68e80e33aab41f4836c58fafff5329da7f0fa9c10a707c122cb9e2d6ebe03e05431e33195e5309a3493a0f908c992cd116d0428118498d7766511f0f27abaade04110c1f760af75d9739214e8bafb4f01483269a1356b074835289fd82f749e1170ae3ffe18e6a0c3698e7f2d5f618f68f0", 0x90, 0x5, 0x4}, {&(0x7f0000000400)="0b061bbb54135202b15ef5215654d75937e8ca114aa6ae96768574cd5913117e75494f2777a56102d3c15b3756c04202777882512e168123099c67a424f572692d5b23b4b338c1427687d5375cda4bdcdff0fb69eeaa6cb22069e6037c0e63f0002351c951368b058e9091adff", 0x6d, 0x378, 0x8}, {&(0x7f0000000480)="16bdb74d806c497288f14a11fae39a0a8052e78f08e107391797dc73def43af8fba62874f8642d83afa2b9fa824883cd1a3969ad7e330c8f8a1752a77fe4c146ca5c9f2b65794d99186e99b80261819cba337bb08512186f3d183ac2803379c0c0bd3e1ab430d8cc32f7ec07cdc9b0a3e4a80df72615b730619815eec864a57497581b1e00e9ab50079e72fc14f969443e558ebfb104c4e8fa570def664de68e6ec2f5887daa5a14bc0e4e93aa8cb0122794c6ac1238f9243a4209d1a9b79c20ff453a39e413333ed713ae2dc20da637", 0xd0, 0x4945, 0x8}, {&(0x7f0000000580)="bb065f9714356c985a02494567a8f819d133a84e17e4b6935b647a6898bd87f89d815af20e627b2fae0a1174355e3918c2f0df571e8330b7f490438755ed216ce930a23d7df3e88f202105569796777684", 0x51, 0x1, 0x1}, {&(0x7f0000000600)="7f14a548c9f1bbd5028705680d203bd043ba977cbba1514848b6ac613498345adc282708cdea8deecf430fdedefebdfb746ec227fc2c19b83d10e6ce80bc2d94fdafd58ad26f83d57bb629f50c6145c9abd4f8ffd908385223e892b7bcbe0bc78480add1dfa95045803a6cb1a4290a19044f15c2bf0200d6dd4379fa5b5def77f0c81593f8484f339fdb86d70b94e98208e98f585f898dc4689945a29c2f68dcb2a7f064132e1f4e54", 0xa9, 0x7fffffff, 0x10000}, {&(0x7f00000006c0)="f04c1d36a9a5a8f8dcde2d6ce72b47bacc8c2e06bad209dc6a6b7ee32ff4419df586dbfd81dc2092983ffba0bde6e651c04cde536ca7", 0x36, 0x20}, {&(0x7f0000000700)="e3f90fcb7108b7ff5d7a019bb549dc16bdb5df9b93af0da537f5c8bede7b27ffbf2906b91d850f89679379589ec9b4ff1eea25e34555c0c331891fd21df6b14b48f675da31d969a9bb23a3558db0a23e6a7d227527174532a2a50cd93054afc3b98023b4ec488f953fc936a764b79c352bd02b57c4cae601498b122500cb9253dbeebd64cd9937c9d6837d401b8a0d1b452d5349f645b979b978a1564759b593b739a3aad74a6c8e04efb8a4acc4514496aa3ba264f0ac1034a368bcdf0058d8b81a2a07f84634c4e93c3407e3b49ba632f2b8f33ca2688e40947bf2f3cd05865340fd", 0xe3, 0x800, 0x6}, {&(0x7f0000000800)="1ad5948a4e55a5e63263c3cced1bc5638348f98cf401a31d30fd03de1f2386f43de64254331900d1d190224fb29aff6f722130473350370642b84fbbcc41f757aeca3b7aef7cbe274b5872d07622f96cf4ae2ead3832762cad622c5d4f10de416b69fbcc72c750df2d4875fb30811b8eccce86ccf43cbc8efb9461e1dbb75918d0dabcf4f7a7df0b51e01b7eef1a63fe6ac4048534edf1efcf341901f544da7031daacb8d93b5b5fc5039c357e2c71db9c015ae746a51a444b", 0xb9, 0x7fff, 0x9}, {&(0x7f00000008c0)="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", 0x1000, 0x4, 0x2}, {&(0x7f00000018c0)="86f9a9a0b8b0ffc9f229102a2424e4432949ad60aa9b3193a12f78fea13d4195d1e149262f6eb98b824de8f722c27f5e77ab45e1e9e558ac20ee106e32fef3fc35169ed17a", 0x45, 0x1f, 0x5}], 0x320000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x1, 0x10, 0xfa00, {&(0x7f0000001a80)}}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={{r8}, 0xab7, 0x3, 0x9c09}) 08:51:07 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000506d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1530.607778][T15589] vhci_hcd: invalid port number 0 08:51:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x28140, 0x106) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000180)={0x9, &(0x7f0000000080)="6f076cd38b26edac8768cbb37f4dcb83d72598f9a56c4efa0b19d46d899a62877b99d627b98ffcae5f65b2d365ef8d3f4fc3cf8fc4b508d843a9771faae0777b0b800ab85687a82c09a652c4a1365aabe8503512364b86b25300d37a0fa29cbd969789c9d57cad350a0c9efdaac413602d6d3bc2e097dbd76b436998178b5d95880bbbccebefe1b620d9da2c67b1ec506045f5618a1c0f8a5e51ebc625fa6b6751e2560b8ce21f3a6f022e59c76b1d6831ec21783e50c5ece2e77b6e341028d556b721dd69b2047539c80113cc6dc52fed156602c1827db35ba4b4a322df4ee1"}) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) [ 1530.740698][T15597] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1530.772843][T15598] vhci_hcd: invalid port number 0 08:51:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)=""/237, 0xed}], 0x1, &(0x7f0000000380)=""/70, 0x46}, 0x10103) getsockopt(r2, 0x0, 0x0, &(0x7f0000000440)=""/231, &(0x7f0000000540)=0xe7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000580)={0x2, {0x2, 0xff7f, 0x9, 0x2, 0x7a}}) r6 = dup(r3) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'gretap0\x00', r7, 0x1, 0x80, 0x7, 0x8, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x65, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x7a, 0x1, 0x4, [{@empty, 0x848ccda2}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x7, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x31}, 0xffffffff}, {@remote, 0x7f}]}, @noop, @rr={0x7, 0x13, 0x92, [@broadcast, @loopback, @private=0xa010100, @local]}, @ssrr={0x89, 0x1b, 0x8b, [@private=0xa010102, @rand_addr=0x64010100, @multicast2, @local, @loopback, @empty]}]}}}}}) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r8, 0x551f, 0x0) [ 1530.806769][T15598] vhci_hcd: invalid port number 0 [ 1530.846030][T15597] device .725 entered promiscuous mode [ 1530.908935][T15606] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) kexec_load(0x4, 0xa, &(0x7f0000001940)=[{&(0x7f0000000340)="b1b9f0121897fa5a86eba88a46e8e6ff1beb427024a74b4ed3bb549389cbc68e80e33aab41f4836c58fafff5329da7f0fa9c10a707c122cb9e2d6ebe03e05431e33195e5309a3493a0f908c992cd116d0428118498d7766511f0f27abaade04110c1f760af75d9739214e8bafb4f01483269a1356b074835289fd82f749e1170ae3ffe18e6a0c3698e7f2d5f618f68f0", 0x90, 0x5, 0x4}, {&(0x7f0000000400)="0b061bbb54135202b15ef5215654d75937e8ca114aa6ae96768574cd5913117e75494f2777a56102d3c15b3756c04202777882512e168123099c67a424f572692d5b23b4b338c1427687d5375cda4bdcdff0fb69eeaa6cb22069e6037c0e63f0002351c951368b058e9091adff", 0x6d, 0x378, 0x8}, {&(0x7f0000000480)="16bdb74d806c497288f14a11fae39a0a8052e78f08e107391797dc73def43af8fba62874f8642d83afa2b9fa824883cd1a3969ad7e330c8f8a1752a77fe4c146ca5c9f2b65794d99186e99b80261819cba337bb08512186f3d183ac2803379c0c0bd3e1ab430d8cc32f7ec07cdc9b0a3e4a80df72615b730619815eec864a57497581b1e00e9ab50079e72fc14f969443e558ebfb104c4e8fa570def664de68e6ec2f5887daa5a14bc0e4e93aa8cb0122794c6ac1238f9243a4209d1a9b79c20ff453a39e413333ed713ae2dc20da637", 0xd0, 0x4945, 0x8}, {&(0x7f0000000580)="bb065f9714356c985a02494567a8f819d133a84e17e4b6935b647a6898bd87f89d815af20e627b2fae0a1174355e3918c2f0df571e8330b7f490438755ed216ce930a23d7df3e88f202105569796777684", 0x51, 0x1, 0x1}, {&(0x7f0000000600)="7f14a548c9f1bbd5028705680d203bd043ba977cbba1514848b6ac613498345adc282708cdea8deecf430fdedefebdfb746ec227fc2c19b83d10e6ce80bc2d94fdafd58ad26f83d57bb629f50c6145c9abd4f8ffd908385223e892b7bcbe0bc78480add1dfa95045803a6cb1a4290a19044f15c2bf0200d6dd4379fa5b5def77f0c81593f8484f339fdb86d70b94e98208e98f585f898dc4689945a29c2f68dcb2a7f064132e1f4e54", 0xa9, 0x7fffffff, 0x10000}, {&(0x7f00000006c0)="f04c1d36a9a5a8f8dcde2d6ce72b47bacc8c2e06bad209dc6a6b7ee32ff4419df586dbfd81dc2092983ffba0bde6e651c04cde536ca7", 0x36, 0x20}, {&(0x7f0000000700)="e3f90fcb7108b7ff5d7a019bb549dc16bdb5df9b93af0da537f5c8bede7b27ffbf2906b91d850f89679379589ec9b4ff1eea25e34555c0c331891fd21df6b14b48f675da31d969a9bb23a3558db0a23e6a7d227527174532a2a50cd93054afc3b98023b4ec488f953fc936a764b79c352bd02b57c4cae601498b122500cb9253dbeebd64cd9937c9d6837d401b8a0d1b452d5349f645b979b978a1564759b593b739a3aad74a6c8e04efb8a4acc4514496aa3ba264f0ac1034a368bcdf0058d8b81a2a07f84634c4e93c3407e3b49ba632f2b8f33ca2688e40947bf2f3cd05865340fd", 0xe3, 0x800, 0x6}, {&(0x7f0000000800)="1ad5948a4e55a5e63263c3cced1bc5638348f98cf401a31d30fd03de1f2386f43de64254331900d1d190224fb29aff6f722130473350370642b84fbbcc41f757aeca3b7aef7cbe274b5872d07622f96cf4ae2ead3832762cad622c5d4f10de416b69fbcc72c750df2d4875fb30811b8eccce86ccf43cbc8efb9461e1dbb75918d0dabcf4f7a7df0b51e01b7eef1a63fe6ac4048534edf1efcf341901f544da7031daacb8d93b5b5fc5039c357e2c71db9c015ae746a51a444b", 0xb9, 0x7fff, 0x9}, {&(0x7f00000008c0)="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", 0x1000, 0x4, 0x2}, {&(0x7f00000018c0)="86f9a9a0b8b0ffc9f229102a2424e4432949ad60aa9b3193a12f78fea13d4195d1e149262f6eb98b824de8f722c27f5e77ab45e1e9e558ac20ee106e32fef3fc35169ed17a", 0x45, 0x1f, 0x5}], 0x320000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x1, 0x10, 0xfa00, {&(0x7f0000001a80)}}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={{r8}, 0xab7, 0x3, 0x9c09}) [ 1530.997605][T15606] device .726 entered promiscuous mode [ 1531.116136][T15615] vhci_hcd: invalid port number 0 [ 1531.161800][T15615] vhci_hcd: invalid port number 0 08:51:08 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000507d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7, 0x5, 0x1, 0x80000001, 0x3ff}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000240)=0x84) 08:51:08 executing program 3: r0 = creat(&(0x7f0000001080)='./file0\x00', 0xa) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000001100)=""/143) execve(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001380)=[&(0x7f0000001200)='\x00', &(0x7f0000001240)='/dev/bus/usb/00#/00#\x00', &(0x7f0000001280)=')%\'&-\x00', &(0x7f00000012c0)='/dev/bus/usb/00#/00#\x00', &(0x7f0000001300)='/dev/bus/usb/00#/00#\x00', &(0x7f0000001340)='/dev/bus/usb/00#/00#\x00'], &(0x7f0000001480)=[&(0x7f00000013c0)='\x00', &(0x7f0000001400)='@/^\\$#!/)\x00', &(0x7f0000001440)='{^\\\\\x00']) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f0000000080)="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"}, 0x20) ioctl$USBDEVFS_CONTROL(r1, 0x551f, 0x0) 08:51:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="020025bd7000fbdbdf25860000000800a000000008202700020000000800270003d5991e940018012e000000050019010d000000050019010b00f1ff050019010400000005001801010000009a8552568b5f93771bd26f988c321031eb87a1e5d59044f41d6d5e166589848d8c4120c059aec1b0527b5692bc1ba49a623e32ba5b1023918c0316cc25362462a8f8f46f81830016c967bf93d6112c022294267d646699251f52ea35acc20d4b48b9ea19d61c378e02fc30dffffcd79407cc0606a0eb6bbd228597352451c9cbdbfc8b3362c01b47938c36093ef15dbc5f2e081dcffb43f00219e29a493f162e350200c3cc87db61f4bc5d7bd1dede208cc78cd982b65201876cb10ec00617f59e0c4ca3a6d725"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) kexec_load(0x4, 0xa, &(0x7f0000001940)=[{&(0x7f0000000340)="b1b9f0121897fa5a86eba88a46e8e6ff1beb427024a74b4ed3bb549389cbc68e80e33aab41f4836c58fafff5329da7f0fa9c10a707c122cb9e2d6ebe03e05431e33195e5309a3493a0f908c992cd116d0428118498d7766511f0f27abaade04110c1f760af75d9739214e8bafb4f01483269a1356b074835289fd82f749e1170ae3ffe18e6a0c3698e7f2d5f618f68f0", 0x90, 0x5, 0x4}, {&(0x7f0000000400)="0b061bbb54135202b15ef5215654d75937e8ca114aa6ae96768574cd5913117e75494f2777a56102d3c15b3756c04202777882512e168123099c67a424f572692d5b23b4b338c1427687d5375cda4bdcdff0fb69eeaa6cb22069e6037c0e63f0002351c951368b058e9091adff", 0x6d, 0x378, 0x8}, {&(0x7f0000000480)="16bdb74d806c497288f14a11fae39a0a8052e78f08e107391797dc73def43af8fba62874f8642d83afa2b9fa824883cd1a3969ad7e330c8f8a1752a77fe4c146ca5c9f2b65794d99186e99b80261819cba337bb08512186f3d183ac2803379c0c0bd3e1ab430d8cc32f7ec07cdc9b0a3e4a80df72615b730619815eec864a57497581b1e00e9ab50079e72fc14f969443e558ebfb104c4e8fa570def664de68e6ec2f5887daa5a14bc0e4e93aa8cb0122794c6ac1238f9243a4209d1a9b79c20ff453a39e413333ed713ae2dc20da637", 0xd0, 0x4945, 0x8}, {&(0x7f0000000580)="bb065f9714356c985a02494567a8f819d133a84e17e4b6935b647a6898bd87f89d815af20e627b2fae0a1174355e3918c2f0df571e8330b7f490438755ed216ce930a23d7df3e88f202105569796777684", 0x51, 0x1, 0x1}, {&(0x7f0000000600)="7f14a548c9f1bbd5028705680d203bd043ba977cbba1514848b6ac613498345adc282708cdea8deecf430fdedefebdfb746ec227fc2c19b83d10e6ce80bc2d94fdafd58ad26f83d57bb629f50c6145c9abd4f8ffd908385223e892b7bcbe0bc78480add1dfa95045803a6cb1a4290a19044f15c2bf0200d6dd4379fa5b5def77f0c81593f8484f339fdb86d70b94e98208e98f585f898dc4689945a29c2f68dcb2a7f064132e1f4e54", 0xa9, 0x7fffffff, 0x10000}, {&(0x7f00000006c0)="f04c1d36a9a5a8f8dcde2d6ce72b47bacc8c2e06bad209dc6a6b7ee32ff4419df586dbfd81dc2092983ffba0bde6e651c04cde536ca7", 0x36, 0x20}, {&(0x7f0000000700)="e3f90fcb7108b7ff5d7a019bb549dc16bdb5df9b93af0da537f5c8bede7b27ffbf2906b91d850f89679379589ec9b4ff1eea25e34555c0c331891fd21df6b14b48f675da31d969a9bb23a3558db0a23e6a7d227527174532a2a50cd93054afc3b98023b4ec488f953fc936a764b79c352bd02b57c4cae601498b122500cb9253dbeebd64cd9937c9d6837d401b8a0d1b452d5349f645b979b978a1564759b593b739a3aad74a6c8e04efb8a4acc4514496aa3ba264f0ac1034a368bcdf0058d8b81a2a07f84634c4e93c3407e3b49ba632f2b8f33ca2688e40947bf2f3cd05865340fd", 0xe3, 0x800, 0x6}, {&(0x7f0000000800)="1ad5948a4e55a5e63263c3cced1bc5638348f98cf401a31d30fd03de1f2386f43de64254331900d1d190224fb29aff6f722130473350370642b84fbbcc41f757aeca3b7aef7cbe274b5872d07622f96cf4ae2ead3832762cad622c5d4f10de416b69fbcc72c750df2d4875fb30811b8eccce86ccf43cbc8efb9461e1dbb75918d0dabcf4f7a7df0b51e01b7eef1a63fe6ac4048534edf1efcf341901f544da7031daacb8d93b5b5fc5039c357e2c71db9c015ae746a51a444b", 0xb9, 0x7fff, 0x9}, {&(0x7f00000008c0)="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", 0x1000, 0x4, 0x2}, {&(0x7f00000018c0)="86f9a9a0b8b0ffc9f229102a2424e4432949ad60aa9b3193a12f78fea13d4195d1e149262f6eb98b824de8f722c27f5e77ab45e1e9e558ac20ee106e32fef3fc35169ed17a", 0x45, 0x1f, 0x5}], 0x320000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x1, 0x10, 0xfa00, {&(0x7f0000001a80)}}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={{r8}, 0xab7, 0x3, 0x9c09}) [ 1531.461865][T15627] vhci_hcd: invalid port number 0 08:51:08 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000508d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000080)=""/212) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x81) [ 1531.503863][T15627] vhci_hcd: invalid port number 0 08:51:08 executing program 4: r0 = dup(0xffffffffffffffff) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x4, 0x30}, &(0x7f0000001780)=0xc) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000280)="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", 0x1000}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000017c0)=ANY=[@ANYBLOB="280000001e00050f0000000000000000070000008f9a7fa0f4a87a000e993a485aa03fc979ed079f42d38e15c850c1f3bcf11a68eb46ee3ea519ebb6ac486a2fd0fb9cdf0621e352de9c36ceacd6f595c75403570584ec689ad7beca74cfb68ef21544de86a37e117fd40ed9097f37747cad6f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1ff, 0xc280) ioctl$HIDIOCGUCODE(r6, 0xc018480d, &(0x7f0000000180)={0x3, 0x200, 0xc876, 0x9, 0x7f, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000001280)={{0x0, 0x5, 0x8, 0x8000, 'syz1\x00', 0x1}, 0x1, [0x3f, 0x1ff, 0x5, 0x180000000000000, 0x20, 0xff, 0xfffffffffffffff8, 0x4, 0x100, 0x1ff, 0xffffffffffff99f3, 0x8000, 0x1, 0x3, 0x5, 0x2, 0x0, 0xdcb, 0x4, 0x11, 0xee7, 0xff, 0x3, 0x6, 0x1, 0xfff, 0x2, 0x80, 0x0, 0x1, 0x8, 0x4, 0x100000000, 0x8, 0xffffffffffffffff, 0x1, 0x7fbc, 0x62d, 0xffffffffffffff38, 0xfffffffffffffffb, 0x6, 0xffffffff, 0x3f, 0xe4a, 0x7ff, 0x0, 0xfff, 0x2, 0x1, 0xfffffffffffffe00, 0xffffffff7fffffff, 0xca2, 0xfffffffffffffffc, 0x401, 0x6, 0x1, 0x1, 0x8, 0x6, 0x8, 0x2, 0xfffffffffffffff7, 0xf0, 0x3, 0xd9, 0x0, 0x81, 0x5, 0x7, 0x8, 0x3, 0x0, 0x1, 0x9, 0x0, 0xfff, 0x80000000, 0x3, 0x800, 0x400, 0x812, 0x1, 0x6, 0x7f, 0x40, 0x81, 0x7fffffff, 0x7, 0x3, 0x7, 0x759, 0x4, 0x101, 0x4, 0x1, 0x401, 0x1, 0x8001, 0x35a4ec92, 0x3ff, 0x8, 0x5, 0x80, 0x8000, 0x1, 0x1800000, 0x6, 0x5, 0x5, 0x3, 0x1, 0x4, 0x6, 0x80000000, 0x6, 0x7fff, 0x8, 0x3, 0x200, 0x3, 0x5, 0xffff, 0x1, 0x3, 0x1000, 0x200, 0x1, 0x2000000000000000]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) 08:51:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) kexec_load(0x4, 0xa, &(0x7f0000001940)=[{&(0x7f0000000340)="b1b9f0121897fa5a86eba88a46e8e6ff1beb427024a74b4ed3bb549389cbc68e80e33aab41f4836c58fafff5329da7f0fa9c10a707c122cb9e2d6ebe03e05431e33195e5309a3493a0f908c992cd116d0428118498d7766511f0f27abaade04110c1f760af75d9739214e8bafb4f01483269a1356b074835289fd82f749e1170ae3ffe18e6a0c3698e7f2d5f618f68f0", 0x90, 0x5, 0x4}, {&(0x7f0000000400)="0b061bbb54135202b15ef5215654d75937e8ca114aa6ae96768574cd5913117e75494f2777a56102d3c15b3756c04202777882512e168123099c67a424f572692d5b23b4b338c1427687d5375cda4bdcdff0fb69eeaa6cb22069e6037c0e63f0002351c951368b058e9091adff", 0x6d, 0x378, 0x8}, {&(0x7f0000000480)="16bdb74d806c497288f14a11fae39a0a8052e78f08e107391797dc73def43af8fba62874f8642d83afa2b9fa824883cd1a3969ad7e330c8f8a1752a77fe4c146ca5c9f2b65794d99186e99b80261819cba337bb08512186f3d183ac2803379c0c0bd3e1ab430d8cc32f7ec07cdc9b0a3e4a80df72615b730619815eec864a57497581b1e00e9ab50079e72fc14f969443e558ebfb104c4e8fa570def664de68e6ec2f5887daa5a14bc0e4e93aa8cb0122794c6ac1238f9243a4209d1a9b79c20ff453a39e413333ed713ae2dc20da637", 0xd0, 0x4945, 0x8}, {&(0x7f0000000580)="bb065f9714356c985a02494567a8f819d133a84e17e4b6935b647a6898bd87f89d815af20e627b2fae0a1174355e3918c2f0df571e8330b7f490438755ed216ce930a23d7df3e88f202105569796777684", 0x51, 0x1, 0x1}, {&(0x7f0000000600)="7f14a548c9f1bbd5028705680d203bd043ba977cbba1514848b6ac613498345adc282708cdea8deecf430fdedefebdfb746ec227fc2c19b83d10e6ce80bc2d94fdafd58ad26f83d57bb629f50c6145c9abd4f8ffd908385223e892b7bcbe0bc78480add1dfa95045803a6cb1a4290a19044f15c2bf0200d6dd4379fa5b5def77f0c81593f8484f339fdb86d70b94e98208e98f585f898dc4689945a29c2f68dcb2a7f064132e1f4e54", 0xa9, 0x7fffffff, 0x10000}, {&(0x7f00000006c0)="f04c1d36a9a5a8f8dcde2d6ce72b47bacc8c2e06bad209dc6a6b7ee32ff4419df586dbfd81dc2092983ffba0bde6e651c04cde536ca7", 0x36, 0x20}, {&(0x7f0000000700)="e3f90fcb7108b7ff5d7a019bb549dc16bdb5df9b93af0da537f5c8bede7b27ffbf2906b91d850f89679379589ec9b4ff1eea25e34555c0c331891fd21df6b14b48f675da31d969a9bb23a3558db0a23e6a7d227527174532a2a50cd93054afc3b98023b4ec488f953fc936a764b79c352bd02b57c4cae601498b122500cb9253dbeebd64cd9937c9d6837d401b8a0d1b452d5349f645b979b978a1564759b593b739a3aad74a6c8e04efb8a4acc4514496aa3ba264f0ac1034a368bcdf0058d8b81a2a07f84634c4e93c3407e3b49ba632f2b8f33ca2688e40947bf2f3cd05865340fd", 0xe3, 0x800, 0x6}, {&(0x7f0000000800)="1ad5948a4e55a5e63263c3cced1bc5638348f98cf401a31d30fd03de1f2386f43de64254331900d1d190224fb29aff6f722130473350370642b84fbbcc41f757aeca3b7aef7cbe274b5872d07622f96cf4ae2ead3832762cad622c5d4f10de416b69fbcc72c750df2d4875fb30811b8eccce86ccf43cbc8efb9461e1dbb75918d0dabcf4f7a7df0b51e01b7eef1a63fe6ac4048534edf1efcf341901f544da7031daacb8d93b5b5fc5039c357e2c71db9c015ae746a51a444b", 0xb9, 0x7fff, 0x9}, {&(0x7f00000008c0)="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", 0x1000, 0x4, 0x2}, {&(0x7f00000018c0)="86f9a9a0b8b0ffc9f229102a2424e4432949ad60aa9b3193a12f78fea13d4195d1e149262f6eb98b824de8f722c27f5e77ab45e1e9e558ac20ee106e32fef3fc35169ed17a", 0x45, 0x1f, 0x5}], 0x320000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x1, 0x10, 0xfa00, {&(0x7f0000001a80)}}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1531.588195][T15632] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1531.654120][T15632] device .727 entered promiscuous mode 08:51:08 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0x68181) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x121000, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x80, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) 08:51:08 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r6 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$BLKREPORTZONE(r6, 0xc0101282, &(0x7f0000000000)={0x7}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1531.727776][T15642] device .728 entered promiscuous mode [ 1531.749683][T15643] vhci_hcd: invalid port number 0 [ 1531.769658][T15643] vhci_hcd: invalid port number 0 08:51:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000509d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) kexec_load(0x4, 0xa, &(0x7f0000001940)=[{&(0x7f0000000340)="b1b9f0121897fa5a86eba88a46e8e6ff1beb427024a74b4ed3bb549389cbc68e80e33aab41f4836c58fafff5329da7f0fa9c10a707c122cb9e2d6ebe03e05431e33195e5309a3493a0f908c992cd116d0428118498d7766511f0f27abaade04110c1f760af75d9739214e8bafb4f01483269a1356b074835289fd82f749e1170ae3ffe18e6a0c3698e7f2d5f618f68f0", 0x90, 0x5, 0x4}, {&(0x7f0000000400)="0b061bbb54135202b15ef5215654d75937e8ca114aa6ae96768574cd5913117e75494f2777a56102d3c15b3756c04202777882512e168123099c67a424f572692d5b23b4b338c1427687d5375cda4bdcdff0fb69eeaa6cb22069e6037c0e63f0002351c951368b058e9091adff", 0x6d, 0x378, 0x8}, {&(0x7f0000000480)="16bdb74d806c497288f14a11fae39a0a8052e78f08e107391797dc73def43af8fba62874f8642d83afa2b9fa824883cd1a3969ad7e330c8f8a1752a77fe4c146ca5c9f2b65794d99186e99b80261819cba337bb08512186f3d183ac2803379c0c0bd3e1ab430d8cc32f7ec07cdc9b0a3e4a80df72615b730619815eec864a57497581b1e00e9ab50079e72fc14f969443e558ebfb104c4e8fa570def664de68e6ec2f5887daa5a14bc0e4e93aa8cb0122794c6ac1238f9243a4209d1a9b79c20ff453a39e413333ed713ae2dc20da637", 0xd0, 0x4945, 0x8}, {&(0x7f0000000580)="bb065f9714356c985a02494567a8f819d133a84e17e4b6935b647a6898bd87f89d815af20e627b2fae0a1174355e3918c2f0df571e8330b7f490438755ed216ce930a23d7df3e88f202105569796777684", 0x51, 0x1, 0x1}, {&(0x7f0000000600)="7f14a548c9f1bbd5028705680d203bd043ba977cbba1514848b6ac613498345adc282708cdea8deecf430fdedefebdfb746ec227fc2c19b83d10e6ce80bc2d94fdafd58ad26f83d57bb629f50c6145c9abd4f8ffd908385223e892b7bcbe0bc78480add1dfa95045803a6cb1a4290a19044f15c2bf0200d6dd4379fa5b5def77f0c81593f8484f339fdb86d70b94e98208e98f585f898dc4689945a29c2f68dcb2a7f064132e1f4e54", 0xa9, 0x7fffffff, 0x10000}, {&(0x7f00000006c0)="f04c1d36a9a5a8f8dcde2d6ce72b47bacc8c2e06bad209dc6a6b7ee32ff4419df586dbfd81dc2092983ffba0bde6e651c04cde536ca7", 0x36, 0x20}, {&(0x7f0000000700)="e3f90fcb7108b7ff5d7a019bb549dc16bdb5df9b93af0da537f5c8bede7b27ffbf2906b91d850f89679379589ec9b4ff1eea25e34555c0c331891fd21df6b14b48f675da31d969a9bb23a3558db0a23e6a7d227527174532a2a50cd93054afc3b98023b4ec488f953fc936a764b79c352bd02b57c4cae601498b122500cb9253dbeebd64cd9937c9d6837d401b8a0d1b452d5349f645b979b978a1564759b593b739a3aad74a6c8e04efb8a4acc4514496aa3ba264f0ac1034a368bcdf0058d8b81a2a07f84634c4e93c3407e3b49ba632f2b8f33ca2688e40947bf2f3cd05865340fd", 0xe3, 0x800, 0x6}, {&(0x7f0000000800)="1ad5948a4e55a5e63263c3cced1bc5638348f98cf401a31d30fd03de1f2386f43de64254331900d1d190224fb29aff6f722130473350370642b84fbbcc41f757aeca3b7aef7cbe274b5872d07622f96cf4ae2ead3832762cad622c5d4f10de416b69fbcc72c750df2d4875fb30811b8eccce86ccf43cbc8efb9461e1dbb75918d0dabcf4f7a7df0b51e01b7eef1a63fe6ac4048534edf1efcf341901f544da7031daacb8d93b5b5fc5039c357e2c71db9c015ae746a51a444b", 0xb9, 0x7fff, 0x9}, {&(0x7f00000008c0)="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", 0x1000, 0x4, 0x2}, {&(0x7f00000018c0)="86f9a9a0b8b0ffc9f229102a2424e4432949ad60aa9b3193a12f78fea13d4195d1e149262f6eb98b824de8f722c27f5e77ab45e1e9e558ac20ee106e32fef3fc35169ed17a", 0x45, 0x1f, 0x5}], 0x320000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x1, 0x10, 0xfa00, {&(0x7f0000001a80)}}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) 08:51:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x4008010) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20040, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000240)='/dev/null\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)={0xd0, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x2800}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0xfffb}, {0x8, 0x13, 0xedfd}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xd4}, 0x900) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000367bc08a008c5451cb50596519718bad3cec67e2354e46b789339b59ba2be040cb6df4c72b3a7dd878db5d6e56b55126a9938f7b8704d9b2009b702129a5ef88dd93c72d17a625750e59251037a51b39fc79bf2c6c61afe7d6b81773451aba0a4677b020c6d283ae246f61b9a1fca057bd69a8cb56ecb38629a05e436c773745eb5be84349b391eeee441ad42623c35535e9b523fe586934fc45b808a8160dc6ac2a05b591db440000", @ANYRES16=r1, @ANYBLOB="080026bd7000fcdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048054) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x6c3c1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000001, 0x400) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x100, 0x0) ioctl$USBDEVFS_CONTROL(r8, 0x5523, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000580)={0x0, 0xff, 0x3ff}) 08:51:09 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8002) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000180)=""/81, 0x51}], 0x1, 0x9, 0x2) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 1532.026957][T15658] device .729 entered promiscuous mode [ 1532.027791][T15662] vhci_hcd: invalid port number 0 08:51:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x27f, 0x1, 0x7f}) [ 1532.116489][T15664] vhci_hcd: invalid port number 0 [ 1532.134781][T15665] device .730 entered promiscuous mode [ 1532.188769][T15672] vhci_hcd: invalid port number 0 08:51:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="020025bd7000fbdbdf25860000000800a000000008202700020000000800270003d5991e940018012e000000050019010d000000050019010b00f1ff050019010400000005001801010000009a8552568b5f93771bd26f988c321031eb87a1e5d59044f41d6d5e166589848d8c4120c059aec1b0527b5692bc1ba49a623e32ba5b1023918c0316cc25362462a8f8f46f81830016c967bf93d6112c022294267d646699251f52ea35acc20d4b48b9ea19d61c378e02fc30dffffcd79407cc0606a0eb6bbd228597352451c9cbdbfc8b3362c01b47938c36093ef15dbc5f2e081dcffb43f00219e29a493f162e350200c3cc87db61f4bc5d7bd1dede208cc78cd982b65201876cb10ec00617f59e0c4ca3a6d725"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) kexec_load(0x4, 0xa, &(0x7f0000001940)=[{&(0x7f0000000340)="b1b9f0121897fa5a86eba88a46e8e6ff1beb427024a74b4ed3bb549389cbc68e80e33aab41f4836c58fafff5329da7f0fa9c10a707c122cb9e2d6ebe03e05431e33195e5309a3493a0f908c992cd116d0428118498d7766511f0f27abaade04110c1f760af75d9739214e8bafb4f01483269a1356b074835289fd82f749e1170ae3ffe18e6a0c3698e7f2d5f618f68f0", 0x90, 0x5, 0x4}, {&(0x7f0000000400)="0b061bbb54135202b15ef5215654d75937e8ca114aa6ae96768574cd5913117e75494f2777a56102d3c15b3756c04202777882512e168123099c67a424f572692d5b23b4b338c1427687d5375cda4bdcdff0fb69eeaa6cb22069e6037c0e63f0002351c951368b058e9091adff", 0x6d, 0x378, 0x8}, {&(0x7f0000000480)="16bdb74d806c497288f14a11fae39a0a8052e78f08e107391797dc73def43af8fba62874f8642d83afa2b9fa824883cd1a3969ad7e330c8f8a1752a77fe4c146ca5c9f2b65794d99186e99b80261819cba337bb08512186f3d183ac2803379c0c0bd3e1ab430d8cc32f7ec07cdc9b0a3e4a80df72615b730619815eec864a57497581b1e00e9ab50079e72fc14f969443e558ebfb104c4e8fa570def664de68e6ec2f5887daa5a14bc0e4e93aa8cb0122794c6ac1238f9243a4209d1a9b79c20ff453a39e413333ed713ae2dc20da637", 0xd0, 0x4945, 0x8}, {&(0x7f0000000580)="bb065f9714356c985a02494567a8f819d133a84e17e4b6935b647a6898bd87f89d815af20e627b2fae0a1174355e3918c2f0df571e8330b7f490438755ed216ce930a23d7df3e88f202105569796777684", 0x51, 0x1, 0x1}, {&(0x7f0000000600)="7f14a548c9f1bbd5028705680d203bd043ba977cbba1514848b6ac613498345adc282708cdea8deecf430fdedefebdfb746ec227fc2c19b83d10e6ce80bc2d94fdafd58ad26f83d57bb629f50c6145c9abd4f8ffd908385223e892b7bcbe0bc78480add1dfa95045803a6cb1a4290a19044f15c2bf0200d6dd4379fa5b5def77f0c81593f8484f339fdb86d70b94e98208e98f585f898dc4689945a29c2f68dcb2a7f064132e1f4e54", 0xa9, 0x7fffffff, 0x10000}, {&(0x7f00000006c0)="f04c1d36a9a5a8f8dcde2d6ce72b47bacc8c2e06bad209dc6a6b7ee32ff4419df586dbfd81dc2092983ffba0bde6e651c04cde536ca7", 0x36, 0x20}, {&(0x7f0000000700)="e3f90fcb7108b7ff5d7a019bb549dc16bdb5df9b93af0da537f5c8bede7b27ffbf2906b91d850f89679379589ec9b4ff1eea25e34555c0c331891fd21df6b14b48f675da31d969a9bb23a3558db0a23e6a7d227527174532a2a50cd93054afc3b98023b4ec488f953fc936a764b79c352bd02b57c4cae601498b122500cb9253dbeebd64cd9937c9d6837d401b8a0d1b452d5349f645b979b978a1564759b593b739a3aad74a6c8e04efb8a4acc4514496aa3ba264f0ac1034a368bcdf0058d8b81a2a07f84634c4e93c3407e3b49ba632f2b8f33ca2688e40947bf2f3cd05865340fd", 0xe3, 0x800, 0x6}, {&(0x7f0000000800)="1ad5948a4e55a5e63263c3cced1bc5638348f98cf401a31d30fd03de1f2386f43de64254331900d1d190224fb29aff6f722130473350370642b84fbbcc41f757aeca3b7aef7cbe274b5872d07622f96cf4ae2ead3832762cad622c5d4f10de416b69fbcc72c750df2d4875fb30811b8eccce86ccf43cbc8efb9461e1dbb75918d0dabcf4f7a7df0b51e01b7eef1a63fe6ac4048534edf1efcf341901f544da7031daacb8d93b5b5fc5039c357e2c71db9c015ae746a51a444b", 0xb9, 0x7fff, 0x9}, {&(0x7f00000008c0)="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", 0x1000, 0x4, 0x2}, {&(0x7f00000018c0)="86f9a9a0b8b0ffc9f229102a2424e4432949ad60aa9b3193a12f78fea13d4195d1e149262f6eb98b824de8f722c27f5e77ab45e1e9e558ac20ee106e32fef3fc35169ed17a", 0x45, 0x1f, 0x5}], 0x320000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x1, 0x10, 0xfa00, {&(0x7f0000001a80)}}, 0x18) 08:51:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600050ad25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:09 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001e00050f000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="06e941536cf7e7718a61c0925ddfb674e76e0b0d2d91ebc1ad0f8d5c1d698885c1e957854fab9e1005c834004e86649c9a4ef92cc470fa3480f0f291c13ba67e162161501ff63f35e73f6bf6c096fc2a1bbf2876b55bca66503faa660cf34d577788e999c1c367a8431db66dc307a228b4a7b2cdd5df34649f8f93f531aba678b685f55d916fc8c2083c4e8a79c6f2f08621a82ba216136afe131b08a1491ad9b36bbb67f79cd4b99821506bc1978aad7cafef26acda53207b28d62a258effc3291f33205cfac96e8a93a8db11a489f1b0"], 0x28}}, 0x0) 08:51:09 executing program 1: ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x210002, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1407, 0x510, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8050) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) 08:51:09 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x20000) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x4, 0xa}) [ 1532.379219][T15679] vhci_hcd: invalid port number 0 08:51:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) kexec_load(0x4, 0xa, &(0x7f0000001940)=[{&(0x7f0000000340)="b1b9f0121897fa5a86eba88a46e8e6ff1beb427024a74b4ed3bb549389cbc68e80e33aab41f4836c58fafff5329da7f0fa9c10a707c122cb9e2d6ebe03e05431e33195e5309a3493a0f908c992cd116d0428118498d7766511f0f27abaade04110c1f760af75d9739214e8bafb4f01483269a1356b074835289fd82f749e1170ae3ffe18e6a0c3698e7f2d5f618f68f0", 0x90, 0x5, 0x4}, {&(0x7f0000000400)="0b061bbb54135202b15ef5215654d75937e8ca114aa6ae96768574cd5913117e75494f2777a56102d3c15b3756c04202777882512e168123099c67a424f572692d5b23b4b338c1427687d5375cda4bdcdff0fb69eeaa6cb22069e6037c0e63f0002351c951368b058e9091adff", 0x6d, 0x378, 0x8}, {&(0x7f0000000480)="16bdb74d806c497288f14a11fae39a0a8052e78f08e107391797dc73def43af8fba62874f8642d83afa2b9fa824883cd1a3969ad7e330c8f8a1752a77fe4c146ca5c9f2b65794d99186e99b80261819cba337bb08512186f3d183ac2803379c0c0bd3e1ab430d8cc32f7ec07cdc9b0a3e4a80df72615b730619815eec864a57497581b1e00e9ab50079e72fc14f969443e558ebfb104c4e8fa570def664de68e6ec2f5887daa5a14bc0e4e93aa8cb0122794c6ac1238f9243a4209d1a9b79c20ff453a39e413333ed713ae2dc20da637", 0xd0, 0x4945, 0x8}, {&(0x7f0000000580)="bb065f9714356c985a02494567a8f819d133a84e17e4b6935b647a6898bd87f89d815af20e627b2fae0a1174355e3918c2f0df571e8330b7f490438755ed216ce930a23d7df3e88f202105569796777684", 0x51, 0x1, 0x1}, {&(0x7f0000000600)="7f14a548c9f1bbd5028705680d203bd043ba977cbba1514848b6ac613498345adc282708cdea8deecf430fdedefebdfb746ec227fc2c19b83d10e6ce80bc2d94fdafd58ad26f83d57bb629f50c6145c9abd4f8ffd908385223e892b7bcbe0bc78480add1dfa95045803a6cb1a4290a19044f15c2bf0200d6dd4379fa5b5def77f0c81593f8484f339fdb86d70b94e98208e98f585f898dc4689945a29c2f68dcb2a7f064132e1f4e54", 0xa9, 0x7fffffff, 0x10000}, {&(0x7f00000006c0)="f04c1d36a9a5a8f8dcde2d6ce72b47bacc8c2e06bad209dc6a6b7ee32ff4419df586dbfd81dc2092983ffba0bde6e651c04cde536ca7", 0x36, 0x20}, {&(0x7f0000000700)="e3f90fcb7108b7ff5d7a019bb549dc16bdb5df9b93af0da537f5c8bede7b27ffbf2906b91d850f89679379589ec9b4ff1eea25e34555c0c331891fd21df6b14b48f675da31d969a9bb23a3558db0a23e6a7d227527174532a2a50cd93054afc3b98023b4ec488f953fc936a764b79c352bd02b57c4cae601498b122500cb9253dbeebd64cd9937c9d6837d401b8a0d1b452d5349f645b979b978a1564759b593b739a3aad74a6c8e04efb8a4acc4514496aa3ba264f0ac1034a368bcdf0058d8b81a2a07f84634c4e93c3407e3b49ba632f2b8f33ca2688e40947bf2f3cd05865340fd", 0xe3, 0x800, 0x6}, {&(0x7f0000000800)="1ad5948a4e55a5e63263c3cced1bc5638348f98cf401a31d30fd03de1f2386f43de64254331900d1d190224fb29aff6f722130473350370642b84fbbcc41f757aeca3b7aef7cbe274b5872d07622f96cf4ae2ead3832762cad622c5d4f10de416b69fbcc72c750df2d4875fb30811b8eccce86ccf43cbc8efb9461e1dbb75918d0dabcf4f7a7df0b51e01b7eef1a63fe6ac4048534edf1efcf341901f544da7031daacb8d93b5b5fc5039c357e2c71db9c015ae746a51a444b", 0xb9, 0x7fff, 0x9}, {&(0x7f00000008c0)="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", 0x1000, 0x4, 0x2}, {&(0x7f00000018c0)="86f9a9a0b8b0ffc9f229102a2424e4432949ad60aa9b3193a12f78fea13d4195d1e149262f6eb98b824de8f722c27f5e77ab45e1e9e558ac20ee106e32fef3fc35169ed17a", 0x45, 0x1f, 0x5}], 0x320000) [ 1532.473718][T15682] device .731 entered promiscuous mode 08:51:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xd04f, 0x6a481) r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x7fffffff, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x3) [ 1532.549460][T15692] device .732 entered promiscuous mode 08:51:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x6a000, 0x175, 0x2}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0xfffff001, @mcast1, 0x8}}, 0x10001, 0xff8, 0x1, 0x8, 0x800}, &(0x7f0000000980)=0x98) sendmsg$inet_sctp(r1, &(0x7f0000000ac0)={&(0x7f0000000280)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f00000002c0)="32ba02f6e39b52d2a02ee98970fdd12bf0eb0659d04fa4dccd326bb854a8caa8fecf48565522905dfb61208434f1f1323055ea8505bc1e0b1935534a4fa8213c7d20926520f9202a716cc7ad6731571ea6885a8a388f238a848e5ce684d368e699302b4f38fc443c", 0x68}, {&(0x7f0000000340)="6e36ce333bbadd528adbd12928792b76604076da6424a915d9718769f32f27edfe8647bdc10f1956cbcc85a86e73de79a6603a883e5c9c65902426c101d0e1ef6b0da3c91ab61dbb6d8c6a252bd56e7af58e1f0c6032c869dd85adde1dabc652642bb2ad0796ef691c46fcf39863fc4a3646d6bca29dc1ab298aee9b914f987100ad90de6f0113c076fed2af932c7d2c7de2bc611b9d978a0d5246f3636b4d481f7391b518c4688b0248cc75187592a1ad3369997a061b512675a79526fb081631493b07ea17b2539c697ea360769bffb4edd244363905cf462cc60df681db", 0xdf}, {&(0x7f0000000440)="601e0e838f5e214a134469e87ddde708b3799fed3bf4d7c4e20fead7c104d1c318b76d433b2084064bd4a8c1ad9e9669de395c725cf11e5a218438ccd1fb08b3dca79237da0d2e4607be78e7c3e77b577073178232980407703b6a78e23ce1f850cbd59dfab17b698bb8be665aa70f974a", 0x71}, {&(0x7f00000004c0)="c122d05006b99a3e49492b07e3afc43fd09c85c65a8e0ce699fd9d1a11eab7ebefd3c13967bde6b076d55577d179f4b82111c2bfad6a6e94e461d4fab10f8bb65aa60e11664516dd604bc90176c74de14e755815d0866e443af95465475aa5768c5dca4259e3c2b529047ff471c12b10c34dd093d1fffb636314a717af2d881d7fd9", 0x82}, {&(0x7f0000000580)="8cf364112c549976c19e01e5491af5307f4fca465c74018ec851c8858642bc9de6e598d2074ee5dade6a8bf494c42768bedd1d437a59798dc1b53c8b9175a796a9d00ae232d2885a1169b25ce2f6da782c9d6e201b4bb0d51824b2c93f2d28663130e4ae70", 0x65}, {&(0x7f0000000600)="8f1a9fdcbcd0942afbbff9d4c9c0b460376405c949ea78aec71be646c9dddeca85d17fd44cfea2792f33c6b5aa89a1e247d46d55a90d0c2f4ebd33d39884e5d8d2f9d042ba9f47e1d631c4291c36900010d5911db135e881af3a5084506e78c4ccc6a971c8327837921b855755dae80dd6fa154b2cfb06f4ee3234969f2406124ff194e0a8a3c736f246bfff5f4b56b0145eedbcedd8be2f634e93d564c138f51f2f9cdef5d7cd91f8b971908e0f", 0xae}, {&(0x7f00000006c0)="5e358cf29c61e993ea9d1366cf05b6a68db95488cf0e32b55b7739803ab77f54e486dc1a096cbc8fb9e53475c3958078d8688f28faf34bf6206b099720a5cd914a6e82a30ebce76fae78d7418dabcfe39cb411ea8a416dd01aadc1967901274d7d5593b481b3a315d280fea68dd96ccd7b9f254d4f354d5789c984dc33bc1727f82d71f2a61f27b2fc04c2bd5e6548747e", 0x91}, {&(0x7f0000000780)="ef14cba835811b4feff458f0542c6947c210834c4e14010a14875bd6aecf43991ac1a13f1595f793e7b98f664e87cb42183932d1d165ce825dbd98d216cab1d0f2569400d5cc3134ba36f1c93be068a1e20b841ca2bc9554d71ccfa5cc80fe7ead85299df732f4a95e734881d58a42ec063e12a7d619bc599085d94873adabe5086ce8", 0x83}], 0x8, &(0x7f00000009c0)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x3f, 0xfff8, 0x200, 0x9, 0x1f, 0x3, 0x9, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0xd545, 0x8000, 0x8, 0x7f, 0x5, 0xff, 0x400, r2}}], 0xc8, 0x20000040}, 0x80) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = pidfd_getfd(r4, r0, 0x0) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000180)=0x1) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030a050000000000000000000c000007df9ed41ce8d5e12dc8ed374bb6e6380ae358e3571d21c1f21713d80b418aa23815844f1796"], 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8040) 08:51:09 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000bcc8fbd52d9026d40000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="90eac18601c0eb663263da6d2c5bb2611ed9c55b1f09d1fc2f0502fbfcdeea525741a04e5160dc6b212e0bde3654dd3eee355a139e42afd3"], 0x28}}, 0x40003) [ 1532.637568][T15698] vhci_hcd: invalid port number 0 08:51:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600050bd25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:10 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0xc60c50363348bc7f) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5523, 0x0) 08:51:10 executing program 3: keyctl$join(0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) kexec_load(0x4, 0xa, &(0x7f0000001940)=[{&(0x7f0000000340)="b1b9f0121897fa5a86eba88a46e8e6ff1beb427024a74b4ed3bb549389cbc68e80e33aab41f4836c58fafff5329da7f0fa9c10a707c122cb9e2d6ebe03e05431e33195e5309a3493a0f908c992cd116d0428118498d7766511f0f27abaade04110c1f760af75d9739214e8bafb4f01483269a1356b074835289fd82f749e1170ae3ffe18e6a0c3698e7f2d5f618f68f0", 0x90, 0x5, 0x4}, {&(0x7f0000000400)="0b061bbb54135202b15ef5215654d75937e8ca114aa6ae96768574cd5913117e75494f2777a56102d3c15b3756c04202777882512e168123099c67a424f572692d5b23b4b338c1427687d5375cda4bdcdff0fb69eeaa6cb22069e6037c0e63f0002351c951368b058e9091adff", 0x6d, 0x378, 0x8}, {&(0x7f0000000480)="16bdb74d806c497288f14a11fae39a0a8052e78f08e107391797dc73def43af8fba62874f8642d83afa2b9fa824883cd1a3969ad7e330c8f8a1752a77fe4c146ca5c9f2b65794d99186e99b80261819cba337bb08512186f3d183ac2803379c0c0bd3e1ab430d8cc32f7ec07cdc9b0a3e4a80df72615b730619815eec864a57497581b1e00e9ab50079e72fc14f969443e558ebfb104c4e8fa570def664de68e6ec2f5887daa5a14bc0e4e93aa8cb0122794c6ac1238f9243a4209d1a9b79c20ff453a39e413333ed713ae2dc20da637", 0xd0, 0x4945, 0x8}, {&(0x7f0000000580)="bb065f9714356c985a02494567a8f819d133a84e17e4b6935b647a6898bd87f89d815af20e627b2fae0a1174355e3918c2f0df571e8330b7f490438755ed216ce930a23d7df3e88f202105569796777684", 0x51, 0x1, 0x1}, {&(0x7f0000000600)="7f14a548c9f1bbd5028705680d203bd043ba977cbba1514848b6ac613498345adc282708cdea8deecf430fdedefebdfb746ec227fc2c19b83d10e6ce80bc2d94fdafd58ad26f83d57bb629f50c6145c9abd4f8ffd908385223e892b7bcbe0bc78480add1dfa95045803a6cb1a4290a19044f15c2bf0200d6dd4379fa5b5def77f0c81593f8484f339fdb86d70b94e98208e98f585f898dc4689945a29c2f68dcb2a7f064132e1f4e54", 0xa9, 0x7fffffff, 0x10000}, {&(0x7f00000006c0)="f04c1d36a9a5a8f8dcde2d6ce72b47bacc8c2e06bad209dc6a6b7ee32ff4419df586dbfd81dc2092983ffba0bde6e651c04cde536ca7", 0x36, 0x20}, {&(0x7f0000000700)="e3f90fcb7108b7ff5d7a019bb549dc16bdb5df9b93af0da537f5c8bede7b27ffbf2906b91d850f89679379589ec9b4ff1eea25e34555c0c331891fd21df6b14b48f675da31d969a9bb23a3558db0a23e6a7d227527174532a2a50cd93054afc3b98023b4ec488f953fc936a764b79c352bd02b57c4cae601498b122500cb9253dbeebd64cd9937c9d6837d401b8a0d1b452d5349f645b979b978a1564759b593b739a3aad74a6c8e04efb8a4acc4514496aa3ba264f0ac1034a368bcdf0058d8b81a2a07f84634c4e93c3407e3b49ba632f2b8f33ca2688e40947bf2f3cd05865340fd", 0xe3, 0x800, 0x6}, {&(0x7f0000000800)="1ad5948a4e55a5e63263c3cced1bc5638348f98cf401a31d30fd03de1f2386f43de64254331900d1d190224fb29aff6f722130473350370642b84fbbcc41f757aeca3b7aef7cbe274b5872d07622f96cf4ae2ead3832762cad622c5d4f10de416b69fbcc72c750df2d4875fb30811b8eccce86ccf43cbc8efb9461e1dbb75918d0dabcf4f7a7df0b51e01b7eef1a63fe6ac4048534edf1efcf341901f544da7031daacb8d93b5b5fc5039c357e2c71db9c015ae746a51a444b", 0xb9, 0x7fff, 0x9}, {&(0x7f00000008c0)="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", 0x1000, 0x4, 0x2}, {&(0x7f00000018c0)="86f9a9a0b8b0ffc9f229102a2424e4432949ad60aa9b3193a12f78fea13d4195d1e149262f6eb98b824de8f722c27f5e77ab45e1e9e558ac20ee106e32fef3fc35169ed17a", 0x45, 0x1f, 0x5}], 0x320000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000001b40)={0x1, 0x10, 0xfa00, {&(0x7f0000001a80)}}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={{r8}, 0xab7, 0x3, 0x9c09}) [ 1532.891162][T15713] vhci_hcd: invalid port number 0 08:51:10 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600050cd25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) [ 1533.035398][T15718] vhci_hcd: invalid port number 0 [ 1533.038557][T15719] usb usb9: usbfs: process 15719 (syz-executor.3) did not claim interface 0 before use [ 1533.109034][T15719] usb usb9: selecting invalid altsetting 63 [ 1533.132150][T15721] device .733 entered promiscuous mode [ 1533.146200][T15718] vhci_hcd: invalid port number 0 08:51:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x2) 08:51:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = pidfd_getfd(r3, r1, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x5a) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0x40044103, &(0x7f0000000000)=0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 08:51:10 executing program 1: sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000081}, 0xc0) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x28040, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5523, 0x0) [ 1533.265770][T15733] device .734 entered promiscuous mode 08:51:10 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600050dd25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1533.439689][T15743] vhci_hcd: invalid port number 0 08:51:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000000)=[0x400, 0x81, 0x7f, 0x9, 0x7], 0x5, 0x2, 0x8, 0x1, 0x4, 0x3, 0x0, {0x7, 0x6dc7, 0x7, 0xe21e, 0x0, 0x2, 0xff42, 0x80, 0x7fff, 0x8, 0x8001, 0x3, 0xffffffff, 0x1, "d293a891df89a6db5735646208f39303c87cb91bf4c8297edb520caa0e75cb59"}}) 08:51:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 08:51:10 executing program 4: keyctl$join(0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) r4 = signalfd4(r3, &(0x7f0000000000)={[0x8]}, 0x8, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x2, 0x1, 0x22, 0x0, 0x400000000}, 0x20) dup3(r5, r4, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000017c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c200080a2a2dc7838167af0", @ANYRES16=r7, @ANYBLOB="00022dbd7000fedbdf250300000008000400c0000002"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r7, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010104}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xb4, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:update_modules_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xbc, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48892}, 0x400c000) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x4, 0x6}) [ 1533.609468][T15748] device .735 entered promiscuous mode [ 1533.677231][T15757] validate_nla: 8 callbacks suppressed [ 1533.677255][T15757] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1533.693460][T15755] usb usb9: usbfs: process 15755 (syz-executor.4) did not claim interface 0 before use 08:51:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x567022) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000940)=0x200, 0x4) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)={0x608, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x2ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8f, 0x3, "099820bae7c37c1f2032284a02c48a5fbb5e144d245548bbdb0df6480d088b99f310b8a12322ad436b837fe3c742018319f99887f6e14de9d046b9bc27c2a8b77241b8061e8cbb33971c8dc7b6cec0d6476f9caa8d3615811b72e64edada8674fa04ed897635af92e1bc0908a8722c31028fa6658456a73170cba7cc333e38d06da6b8c58d831800a7cf24"}, @TIPC_NLA_NODE_ID={0x5a, 0x3, "aac8c8350a4e46b7ddbd00a19aa3e1a742c4b8ed7acfacf7c4a4fcaec7911e21b9406f0575edb8bed6e1eb8c593892d82528d0a04ab9b2965b0afa9771b1c968b38f66c0ca7a505617da9b1c7662ce1408fcec733957"}, @TIPC_NLA_NODE_ID={0xc6, 0x3, "1f9d59992fb69dbd329f8147737363e32062cae1bcf20c469bd2c9c0d10f5c5e2e3615437cd26cb025028f00200dd489729ae6433432c7850b7585ef5e941527fde748ffccc72c180bbe1537e91651765a0da2efcf460ebbb668146bc2e92b6a1bd7c66a3d31469fd16dcc5b856de5c02391b5c043ef523ec5047639d4a3b8e2836b65fda1e045beda97b78574bfd185618e21f92c0d82b79001b6a73c24b3099a92814826540947c1330371b51d12432a2cfabd9d38b1414803a66f05594ab9b2ea"}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "62879e4124a7d01c4748f7d0d2279dd04736dc2661994e9aa72468e34e375e0177a9c5629c742f9f830ffd75d51be760354cd7a640f7ab4e20d285a64153654f8efcad2079c2e59ef73e4b6e223d36e8b39c9b217a738cee399bdd50bf2689036ba5325e35733828c4d87e8d720851fef28da085a3123dec15046464c577e7379f213585d2c97a9b0532745e60fdd04098b022d9d59cf9a7177873871562ba73f742945b143f616ef1a7e05e8bf819091bf0"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4d14d49114a88780df83301db0c06d1c5f76b543"}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4e3e9bfd}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe6d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x74eb}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000780)={[0x106d]}, 0x8, 0x80000) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000007c0)) [ 1533.739476][T15755] usb usb9: selecting invalid altsetting 63 08:51:11 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1533.828712][T15757] device .736 entered promiscuous mode 08:51:11 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5523, 0x0) 08:51:11 executing program 4: keyctl$join(0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x401, 0x78181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:11 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600050fd25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:11 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x80082) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000010) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) setreuid(0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @private0, 0xfffffffc}, 0x1c) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(r1, 0x5) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x13, &(0x7f00000000c0)={0xa, 0x4e22, 0x20000000, @empty, 0x8}, 0x1c) 08:51:11 executing program 1: ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000000)={{@any, 0xfffffff9}, 0x9, 0x45, 0x78f, 0x8, 0x0, 0x0, 0x5, 0x101}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) [ 1534.070114][T15780] usb usb9: usbfs: process 15780 (syz-executor.4) did not claim interface 0 before use 08:51:11 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r6 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:11 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x550b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x2, 0x9, 0x8a, 0x63}, 'syz0\x00', 0x4f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x0, 0x2, 0x4, 0x2, 0x3, 0x7fff, 0x7e, 0x40, 0x1ff, 0x1, 0x800, 0x38, 0x2, 0x0, 0xf28f}, [{0x6474e550, 0x3, 0x5cd0, 0xff, 0x4, 0x1, 0x7, 0xd943}, {0x6, 0x1, 0x8000, 0x1, 0x3, 0x4, 0x3, 0x3168}], "e3f82d5ca10f0ce1faa486adab8dad726124787afe1c86cb56605dacbefcea25632d8f5d989477a134435412d755006adae79c59aed1a514bda817761a331adbbda585e3defbbb5b834c02d2db73be81b37dd921d2ec4a0dc071dacf829ab836de79656dda94a8dbc64702ffa8ea0646712fb74ac4e0c0519fed198a29fe", [[], [], [], [], [], []]}, 0x72e) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000200)={0x1f, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000980)={0x5e, {{0xa, 0x4e23, 0x7, @mcast1, 0x10001}}, 0x1, 0x9, [{{0xa, 0x4e20, 0x2, @loopback, 0x7f}}, {{0xa, 0x4e21, 0x9, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @rand_addr=0x64010100}, 0x6}}, {{0xa, 0x4e24, 0x9, @private2}}, {{0xa, 0x4e20, 0x8, @remote, 0xfff}}, {{0xa, 0x4e20, 0x40ea4c, @mcast2, 0x16fe}}, {{0xa, 0x4e23, 0xb93, @dev={0xfe, 0x80, [], 0x41}, 0x4}}, {{0xa, 0x4e23, 0x6, @mcast2, 0x8}}, {{0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, [], 0x1}, 0xffffffff}}]}, 0x510) [ 1534.136931][T15780] usb usb9: selecting invalid altsetting 63 08:51:11 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000510d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000001c0)=0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10001, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x951, 0x9}, &(0x7f0000000080)=0x8) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) 08:51:11 executing program 4: keyctl$join(0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) [ 1534.346324][T15794] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="1e9a2b64b320bb4ff3a2fd6de8d4", 0xe) [ 1534.429582][T15794] device .737 entered promiscuous mode 08:51:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e00050f000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="f5f8fa8d54d4ba000000000000000008002a002d", @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) sendmsg$xdp(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, 0x0, r7, 0x3a}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="f78854376e91d9cbd2087a6377d643e2b13ad6167233c9", 0x17}, {&(0x7f00000000c0)="9fa46acc4243912037fe269e3665cf65ae23917499bfefd9a9e849", 0x1b}, {&(0x7f0000000100)="2291019d927dc9b3e31871b55a05777d1b8491c004c596402ae623c5c51d7b574a9b98ffea75aeb7c54af636f6ed687211dcf5fe9c48e9117cdecbce3ec7924273ea65c0c52d234954c4a0f113f5606b35328f7897b169f741ec49fd02bbf00bab2e4a43ad7c8c5b026b183d791c68da28720dfa3fcfad18aca425b5456347f2771d0a97c3d2ba602b259f84b49e21a094f0f0408ccfc7549111b025c32f8963f8f5", 0xa2}, {&(0x7f00000001c0)="34b8ffa1313fb53539c6db8879037571bea45b0b17ce32dcb66c5f45ac2f8ddd895bf474b5b8fd679dc108296fed843b15da258eae37d6e02f2230d955cc539cd3ddf7d934e3327745ab04f7cd60d434087df324dfc3ec835aca", 0x5a}], 0x4}, 0x4004) 08:51:11 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1534.496765][T15801] usb usb9: usbfs: process 15801 (syz-executor.4) did not claim interface 0 before use [ 1534.505123][T15802] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1534.564124][T15802] device .738 entered promiscuous mode [ 1534.570183][T15801] usb usb9: selecting invalid altsetting 63 [ 1534.676621][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:51:11 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:11 executing program 4: keyctl$join(0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:12 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5523, 0x0) 08:51:12 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000513d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x270, 0x0, 0x270, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7f, 0x18, "9cef06c543b54aa26296f1573394ac0c8c8f3bbdf142f67fc773a5564c9d"}}}, {{@ipv6={@empty, @ipv4={[], [], @rand_addr=0x64010100}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xff, 0xffffff00, 0x56897c231d7f4fa, 0xffffff00], 'gretap0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x2f, 0x5, 0x4, 0x66}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'syz_tun\x00', 'bridge0\x00', 0x18, 0x2, 0x80, 0x2, 0x2, 0x9, {0x80}, {0x7fffffff}}}, @common=@mh={{0x28, 'mh\x00'}, {"38ac", 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3600}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @private1, [], [0x0, 0xff, 0xff, 0xffffffff], 'netdevsim0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x3c, 0x7, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:12 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x636431e5aaf41eba, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x200088d0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0xd0953a476d7053b9) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vmci\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000428bd7000fddbdf25010000000000000007410000004c001800000000696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) ioctl$USBDEVFS_CONTROL(r1, 0x5523, 0x0) [ 1534.967668][T15823] usb usb9: usbfs: process 15823 (syz-executor.4) did not claim interface 0 before use 08:51:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1535.031731][T15823] usb usb9: selecting invalid altsetting 63 08:51:12 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x48181) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:12 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000514d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:12 executing program 4: keyctl$join(0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000180)=0x10) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) sysfs$2(0x2, 0x800, &(0x7f0000000080)=""/113) prctl$PR_SET_FPEXC(0xc, 0x1) socket(0x1d, 0x6, 0xdf) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="66dbd30fc71d0f001c676665f30f09660fda0f360f21adba420066b8d41f000066ef65c1670a04640f01cbf0810600009941", 0x32}], 0x1, 0x2, &(0x7f0000000140), 0x0) 08:51:12 executing program 3: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000480)="b836c1a2475414dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9dd587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffe1dd93f00000002d2550829eaa94350000000002000000000000009f435fb30000000074b50eaa3c1552418e3b8a29e5c0d0c60000ce0637ce0000b4ec24c53d3f661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7bc63ebe1859640ad4298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000040)='u', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0x3e0, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-generic\x00\x00\x00\x0f\x00\x00\x00yQ\xc56\x9f\x00'}}) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) keyctl$read(0xb, r1, &(0x7f0000000080)=""/132, 0x84) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0x551f, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000240)) 08:51:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f00000002c0)=r3, 0x12) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1535.336479][T15842] usb usb9: usbfs: process 15842 (syz-executor.4) did not claim interface 0 before use [ 1535.355238][T15842] usb usb9: selecting invalid altsetting 63 [ 1535.357635][T15844] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x8007ff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x4c, 0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x8, 0x8, 0x5}) 08:51:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x68181) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x7, 0x0, &(0x7f0000000180)="ba7bb78aa6ba52835495d3f992562ba7458d0e730eac11e65dd5462e7618067f2861a89d5f7ddd07b27c516ebf22d8c2f29fe5b78731db35691a00922f71136b2571f40997d0af49e735c87f3c439b2b4e2d6693eb244fa71a98b89e27c98f89ea4dfb20afb4fc73df1afe718b49272f7fb8b3bf6460c0be3722f7e6baa04f29a18aa4048c3bcbe9f8421b201b33dbafffe021580873"}) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) r2 = semget$private(0x0, 0x3, 0x102) semop(r2, &(0x7f0000000140)=[{0x1, 0x3, 0x1000}, {0x2, 0xcea1, 0x1800}, {0x4, 0x3}, {0x3, 0x7}], 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0xd, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c1}, 0x2098) 08:51:12 executing program 4: keyctl$join(0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) [ 1535.463562][T15844] device .739 entered promiscuous mode 08:51:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x480, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, r8, 0xd3f, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x104, r8, 0x300, 0x70bd25, 0x8, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xe2, 0x2a, [@link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x5, 0x68}}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}, @random_vendor={0xdd, 0x98, "66d7bd4ba9613ab59cbdb380f9e5e84ebb977fe691b3a4248c906185247d55aa19c53d33ff9a6428bf763792a5d3712bf6a90f6a790a3924e13627f3de0df22340a52089ca166115cae17d94556655654a7e007ce680a7bcb8ce7a3ec6185b3b78dfa26424aa5a72a20b6e36bb78206a49f570fd1389bd3c4c7e2a304c73b54776206997fd46d3424aa7105007cc9430e0eba5e7f1233084"}, @chsw_timing={0x68, 0x4, {0x81, 0x2}}, @channel_switch={0x25, 0x3, {0x0, 0x6, 0x3}}, @ibss={0x6, 0x2, 0x3}, @ibss={0x6, 0x2, 0xfffe}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x81}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000000) r9 = dup(r2) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x1, 0x1, 0x3, 0x3, 0x6, 0x8}, @jmp={0x5, 0x1, 0xa, 0xb, 0x8, 0x18, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xffffff98}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @generic={0xe0, 0x4, 0xf, 0x9, 0x8}, @ldst={0x1, 0x1, 0x0, 0x8, 0x2, 0xffffffffffffffc0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000100)='GPL\x00', 0xba, 0x0, 0x0, 0x100, 0x16, [], 0x0, 0x0, r9, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xe, 0x2, 0x7}, 0x10}, 0x78) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) [ 1535.556237][T15855] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1535.583448][T15857] vhci_hcd: invalid port number 0 [ 1535.628452][T15862] vhci_hcd: invalid port number 0 [ 1535.656843][T15866] usb usb9: usbfs: process 15866 (syz-executor.4) did not claim interface 0 before use [ 1535.663326][T15855] device .740 entered promiscuous mode 08:51:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1535.710215][T15866] usb usb9: selecting invalid altsetting 63 08:51:12 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000515d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68981) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) 08:51:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x610301, 0x0) 08:51:13 executing program 4: keyctl$join(0x1, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x3f, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f00000000c0)={0x2}) 08:51:13 executing program 4: keyctl$join(0x1, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1535.957622][T15882] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:13 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x268181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getdents64(r3, &(0x7f00000000c0)=""/235, 0xeb) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 08:51:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000077, 0x68181) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@local, @local}, 0x8) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x401, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x111300, 0x0) fchdir(r0) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x2, 0xf000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) [ 1536.084742][T15882] device .741 entered promiscuous mode [ 1536.165370][T15894] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1536.204037][T15897] vhci_hcd: invalid port number 0 08:51:13 executing program 4: keyctl$join(0x1, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1536.264539][T15894] device .742 entered promiscuous mode [ 1536.269222][T15904] vhci_hcd: invalid port number 0 08:51:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:13 executing program 1: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x5523, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2, {0x100, 0x0, 0x2, 0x1}}) 08:51:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) accept4$packet(r2, 0x0, &(0x7f00000003c0), 0x80800) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) mknodat(r4, &(0x7f0000000000)='./file0\x00', 0x400, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000000c0)={{0x8, 0x2, 0x5, 0xff, '\x00', 0x8}, 0x6, 0x10, 0xffff6797, 0x0, 0x3, 0x7ff, 'syz1\x00', &(0x7f0000000080)=['/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00'], 0x3f, [], [0x3, 0xe3]}) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}}, 0x0) 08:51:13 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000516d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:13 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) 08:51:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) [ 1536.537622][T15918] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1536.558781][T15924] usb usb9: usbfs: process 15924 (syz-executor.4) did not claim interface 0 before use 08:51:13 executing program 5: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000000c0)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 1536.601081][T15924] usb usb9: selecting invalid altsetting 63 [ 1536.617921][T15918] device .743 entered promiscuous mode [ 1536.638521][T15928] vhci_hcd: invalid port number 0 08:51:13 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1536.685556][T15931] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:13 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000140)) [ 1536.781401][T15931] device .744 entered promiscuous mode 08:51:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) 08:51:14 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000518d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:14 executing program 5: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="0008f5000000f50e0367127d79e0e0afcc35ab9bbcf913b9da031d56d2a4a2ccf0a621a5caf21b2103e9e4d5bebf981d1725c95961d7f2e163cafe7b5fbefcfbc5710c1997731d0a0584297e5335e05c8897f47130e8cfa630367caa78b0a9389fdec4f124677b3393ebd624023415a89158396c82e100fd49284a11f13750cabbbd7d093189a0b3888a2f0b42a6362df0c0ee3631cb878b358af7daa297b8f6a56f089362ebc8a9a17711ba9924c0a248fd2690f294c3447b88329af4687ae287609129b0e13e7cf188f38b7fb120fcba316a17aca8d40b1884fc9bc50bc2d5abd19464863b3abf3fa559f0d3fce8581885165fd91533317e52d0"], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0xe, 0xbe, "b4c480370bcfcef602af75e8733a9bc4a6ac448c1792dce32de88d93cca7bfe5c8a92ff81ed54217a3ee32a325258da15d95a4100025062589f14d25e14cc56d045535fe513307eddb330c1d60f34afb4e6df4bdff47c8dd5cfeeb01c0748196ec95b2492ee366fe2e31a0cb925c44ce6079ad1c22a5fd97548d7e7f0da5f3e65ce7efdc69de646fd42814f017c8ddb48558e27af0d7c1afcb7066acb2d0c85aaebee8a33956f72f80f1e594b6bad12ae39cb21f214ca310e7a2ae9e5bf8"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x4, 0x4, 0x10001, 0x401, 0xfffb, 0x4, 0x2, 0x2, 0x101, 0x5, 0x1, 0x4}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3f}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x1ad380) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:14 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x3f, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f00000000c0)={0x2}) [ 1537.046049][T15952] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x7ff, 0x2, 0x800]}, &(0x7f0000000080)=0xa) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) [ 1537.109271][T15952] device .745 entered promiscuous mode 08:51:14 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:14 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1537.223526][T15963] device .746 entered promiscuous mode 08:51:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x3f, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f00000000c0)={0x2}) 08:51:14 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600051ad25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x4c, "de470bd94b59cc01685ad2d466359ee8ea77e01a7cb6e557659c823f134e2207abcb9491c44a6707434db41217cb8d7a54c920a92cfd3698a0ae00ccfd157f8814dbd634836bb2e01cc4befd"}, &(0x7f0000000080)=0x54) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000100)=r5, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r2}) r6 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xa1b, 0x747c2) ioctl$USBDEVFS_CONTROL(r6, 0x5523, 0x0) 08:51:14 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) [ 1537.527418][T15981] device .747 entered promiscuous mode [ 1537.586121][T15988] device .748 entered promiscuous mode 08:51:14 executing program 5: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) bind$qrtr(0xffffffffffffffff, &(0x7f00000001c0)={0x2a, 0x2}, 0xc) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00050f000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="c100773402007ae40000", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, [], 0x1}, r4}, 0x14) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x605c1) ioctl$USBDEVFS_CONTROL(r5, 0x550b, 0x0) 08:51:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x3f, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f00000000c0)={0x2}) 08:51:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:14 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:14 executing program 1: getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x60, 0x8201, 0x3, 0x76, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={r0, 0xffffffff}, &(0x7f0000000100)=0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0x5523, 0x0) 08:51:14 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600051bd25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) [ 1537.821115][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:51:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x3f, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 1537.892420][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 08:51:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x26a180) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) io_setup(0x74a, &(0x7f0000000040)=0x0) io_submit(r1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) 08:51:15 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600051ed25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000040000000001, 0x1a242) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000080)={0x1f, 0x5, 0x8, 0x1ff}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet(0x2, 0x5, 0x800) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0)=0xfffffffe, 0x4) 08:51:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x3f, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40000, 0x0) r3 = signalfd(r2, &(0x7f0000000440)={[0x7ff]}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f0000000480)="81490f87afd6f97c35b19e6063d7efcec4163969a7c417de1d1659eea8235c50110be83a940850845c83a34326aed04789b42583802eca5dd4c8320e0be582752a87d7e691db1180a8a1dcce3f3788b2221f7d9cb7d9ad446e78fa0971a83e89caef247d04d4a3cbd43f0b5895", &(0x7f0000000500)=@udp, 0x4}, 0x20) r4 = dup2(r1, r2) sendmsg$AUDIT_GET(r4, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f00000000c0)={0xffffffff, [[0xffffffff, 0x7, 0x1, 0xe39, 0x7, 0x3, 0x5, 0x6], [0x5, 0x40, 0x2, 0x3, 0x4cb9, 0x8001, 0x9, 0x22], [0x3, 0xd37, 0x4, 0x4, 0x4, 0x10001, 0x7fffffff, 0x4]], [], [{0x7fff, 0x4, 0x0, 0x1}, {0x8, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x1f, 0xff, 0x1, 0x1, 0x0, 0x1}, {0xfffffc01, 0x1, 0x0, 0x1, 0x1}, {0xff, 0x1ff, 0x1, 0x1, 0x1, 0x1}, {0x400, 0x7f, 0x0, 0x1, 0x1, 0x1}, {0xd1, 0x2279, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7ff, 0x200, 0x0, 0x0, 0x1}, {0x0, 0xf7, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x7, 0x1, 0x0, 0x1}, {0x80, 0x4e, 0x0, 0x1, 0x0, 0x1}], [], 0x1}) 08:51:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) [ 1538.232117][T16025] device .749 entered promiscuous mode 08:51:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1538.334312][T16032] device .750 entered promiscuous mode [ 1538.384140][T16040] vhci_hcd: invalid port number 0 08:51:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x3f, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1538.441224][T16040] vhci_hcd: invalid port number 0 08:51:15 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000525d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6000000000000000, 0x232c82) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) 08:51:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x3f}, {0xa, 0x4e22, 0x3f, @private2, 0x64203e6d}, 0x5, [0x1, 0x4, 0xfff, 0x10001, 0x2, 0x80000001, 0x1, 0x7f]}, 0x5c) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000000)=0x6, 0x4) 08:51:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 08:51:15 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) [ 1538.659078][T16054] device .751 entered promiscuous mode 08:51:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x3f, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1538.740120][T16063] validate_nla: 6 callbacks suppressed [ 1538.740144][T16063] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) [ 1538.859238][T16063] device .752 entered promiscuous mode 08:51:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x6000) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x101000, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 08:51:16 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:16 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600053bd25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x3f, 0x4) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:16 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xffff, 0x6, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004880}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x7) ioctl$USBDEVFS_CONTROL(r1, 0x550b, 0x0) 08:51:16 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:16 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)={0x0, 0x3f}) 08:51:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x6000) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x101000, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 08:51:16 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003600055ad25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:16 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x7f) 08:51:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1539.392385][T16104] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) [ 1539.492329][T16104] device .753 entered promiscuous mode 08:51:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x6000) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x101000, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 08:51:16 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0x7f) [ 1539.539915][T16110] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:16 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1539.620727][T16110] device .754 entered promiscuous mode 08:51:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) 08:51:16 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000563d25a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) 08:51:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x6000) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x101000, 0x0) 08:51:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) 08:51:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x6000) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000080)=0x4) 08:51:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) 08:51:17 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20280648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1540.095550][T16138] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:17 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1540.165054][T16138] device .755 entered promiscuous mode 08:51:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x6000) 08:51:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) 08:51:17 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20380648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1540.266652][T16146] usb usb9: usbfs: process 16146 (syz-executor.4) did not claim interface 0 before use [ 1540.341400][T16146] vhci_hcd: default hub control req: 010b v0000 i0000 l0 08:51:17 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1540.433615][T16157] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x6000) 08:51:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) [ 1540.529654][T16157] device .756 entered promiscuous mode 08:51:17 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1540.595469][T16165] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1540.605621][T16167] usb usb9: usbfs: process 16167 (syz-executor.4) did not claim interface 0 before use 08:51:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) [ 1540.655582][T16167] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 1540.673411][T16165] device .757 entered promiscuous mode 08:51:17 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x6000) 08:51:18 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20480648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)) [ 1540.908694][T16183] usb usb9: usbfs: process 16183 (syz-executor.4) did not claim interface 0 before use [ 1540.919978][T16182] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1540.949758][T16183] vhci_hcd: default hub control req: 010b v0000 i0000 l0 08:51:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1540.994507][T16182] device .758 entered promiscuous mode [ 1541.046230][T16187] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1541.150478][T16187] device .759 entered promiscuous mode 08:51:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:18 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1541.228321][T16197] usb usb9: usbfs: process 16197 (syz-executor.4) did not claim interface 0 before use 08:51:18 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20580648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1541.294051][T16197] vhci_hcd: default hub control req: 010b v0000 i0000 l0 08:51:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:18 executing program 1: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x4) [ 1541.464632][T16208] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1541.542568][T16208] device .760 entered promiscuous mode [ 1541.561367][T16214] usb usb9: usbfs: process 16214 (syz-executor.2) did not claim interface 0 before use [ 1541.600507][T16218] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1541.624388][T16214] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 1541.654599][T16218] device .761 entered promiscuous mode 08:51:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:18 executing program 1: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x4) 08:51:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:19 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20680648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1541.905942][T16231] usb usb9: usbfs: process 16231 (syz-executor.4) did not claim interface 0 before use [ 1541.929342][T16231] vhci_hcd: default hub control req: 010b v0000 i0000 l0 08:51:19 executing program 1: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x4) [ 1541.960862][T16232] usb usb9: usbfs: process 16232 (syz-executor.2) did not claim interface 0 before use 08:51:19 executing program 4: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) [ 1542.039800][T16233] device .762 entered promiscuous mode 08:51:19 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:19 executing program 2: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) 08:51:19 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1542.161257][T16239] device .763 entered promiscuous mode 08:51:19 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20780648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:19 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:19 executing program 2: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) 08:51:19 executing program 4: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) 08:51:19 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1542.425745][T16253] device .764 entered promiscuous mode 08:51:19 executing program 2: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) 08:51:19 executing program 4: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) 08:51:19 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1542.521841][T16261] device .765 entered promiscuous mode 08:51:19 executing program 1: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:51:19 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20880648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:19 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 08:51:19 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1542.847585][T16276] device .766 entered promiscuous mode 08:51:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:51:20 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:20 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1542.976607][T16288] device .767 entered promiscuous mode 08:51:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 08:51:20 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20980648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:20 executing program 2: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:20 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:51:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 08:51:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:51:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1543.347808][T16304] device .768 entered promiscuous mode 08:51:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1543.467774][T16310] device .769 entered promiscuous mode 08:51:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:51:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:20 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1543.766262][T16330] validate_nla: 8 callbacks suppressed [ 1543.766289][T16330] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:51:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1543.901788][T16330] device .770 entered promiscuous mode 08:51:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:51:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:21 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20b80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:21 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x4) 08:51:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1544.230070][T16353] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1544.324767][T16353] device .771 entered promiscuous mode 08:51:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:21 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x4) [ 1544.388119][T16361] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1544.468844][T16361] device .772 entered promiscuous mode 08:51:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:21 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20c80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:21 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x4) 08:51:21 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) 08:51:21 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) [ 1544.731397][T16380] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, 0x0) [ 1544.812305][T16380] device .773 entered promiscuous mode 08:51:22 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) 08:51:22 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) [ 1544.878756][T16387] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1544.961219][T16387] device .774 entered promiscuous mode 08:51:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:51:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, 0x0) 08:51:22 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) 08:51:22 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20d80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:22 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)) 08:51:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) [ 1545.227039][T16406] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, 0x0) 08:51:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1545.307215][T16406] device .775 entered promiscuous mode 08:51:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) [ 1545.401670][T16415] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) [ 1545.482925][T16415] device .776 entered promiscuous mode 08:51:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) 08:51:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:51:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 08:51:22 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20e80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) 08:51:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 08:51:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x81800) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000080)={0x6, 0x6, 0xffffff6c}) 08:51:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) [ 1545.814075][T16436] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$nbd(r2, &(0x7f0000000340)=ANY=[], 0x10) ftruncate(r1, 0x200002) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80000}) r4 = socket$inet(0x2, 0x4, 0x1440) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f00000000c0)) creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) [ 1545.895072][T16436] device .777 entered promiscuous mode 08:51:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 08:51:23 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0xfa04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) write$nbd(r2, &(0x7f0000000340)=ANY=[], 0x10) ftruncate(r1, 0x200002) sendfile(r1, r2, 0x0, 0x80001d00c0d0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80000}) r4 = socket$inet(0x2, 0x4, 0x1440) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f00000000c0)) creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) [ 1545.978028][T16446] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000340)={0x5, 0x6}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) prctl$PR_GET_DUMPABLE(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) sendto$inet6(r2, 0x0, 0x0, 0x20000844, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) dup2(r3, r0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000280)) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)) ioctl$USBDEVFS_CONTROL(r4, 0x550b, 0x0) [ 1546.088097][T16446] device .778 entered promiscuous mode 08:51:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000340)={0x5, 0x6}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) prctl$PR_GET_DUMPABLE(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) sendto$inet6(r2, 0x0, 0x0, 0x20000844, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) dup2(r3, r0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000280)) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)) ioctl$USBDEVFS_CONTROL(r4, 0x550b, 0x0) 08:51:23 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d20f80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000340)={0x5, 0x6}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) prctl$PR_GET_DUMPABLE(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) sendto$inet6(r2, 0x0, 0x0, 0x20000844, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) dup2(r3, r0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000280)) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)) ioctl$USBDEVFS_CONTROL(r4, 0x550b, 0x0) [ 1546.392460][ T35] audit: type=1800 audit(1608713483.549:13): pid=16455 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15753 res=0 errno=0 08:51:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x101100, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0xfffffffe}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r2, 0x1, 0x80000}) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) [ 1546.478943][T16464] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1546.546420][T16464] device .779 entered promiscuous mode [ 1546.549613][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1546.711640][T16473] vhci_hcd: invalid port number 0 [ 1546.778598][T16475] device .780 entered promiscuous mode [ 1546.785603][T16473] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 08:51:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000340)={0x5, 0x6}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) prctl$PR_GET_DUMPABLE(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) sendto$inet6(r2, 0x0, 0x0, 0x20000844, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) dup2(r3, r0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000280)) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)) ioctl$USBDEVFS_CONTROL(r4, 0x550b, 0x0) 08:51:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000340)={0x5, 0x6}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) prctl$PR_GET_DUMPABLE(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) sendto$inet6(r2, 0x0, 0x0, 0x20000844, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) dup2(r3, r0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000280)) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000380)) ioctl$USBDEVFS_CONTROL(r4, 0x550b, 0x0) 08:51:24 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21080648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:24 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x550b, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x8}}, 0x18) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000040)={{0x5000, 0x10000, 0x3, 0x4, 0x5, 0x1, 0x2, 0x0, 0x1f, 0x72, 0x9, 0xfb}, {0xd001, 0x6000, 0xd, 0x2, 0x0, 0x3, 0x8, 0x7, 0x8, 0x76, 0xf0, 0x8}, {0x4, 0x10000, 0xd, 0x7, 0xb4, 0xe0, 0x40, 0x3, 0x2, 0x9, 0x3, 0x5}, {0x1, 0x2000, 0x2df7741bbfadbda3, 0x2, 0x82, 0x7, 0x55, 0x6, 0x0, 0x21, 0x1f, 0x2}, {0x1, 0x1, 0xb, 0x20, 0x8, 0x3, 0xe0, 0x2, 0x7, 0x0, 0x8, 0x2}, {0x1000, 0x0, 0x0, 0x1, 0x8, 0x8, 0x3f, 0x81, 0x4, 0x9, 0x1, 0x1}, {0x1, 0x4000, 0x8, 0x4, 0x1f, 0xfd, 0x43, 0x1, 0x20, 0xd9, 0x7, 0xfa}, {0x4000, 0x4, 0x10, 0x92, 0xe4, 0x9, 0x1f, 0x5, 0x6, 0x40, 0xfd, 0x1}, {0x3000, 0x7f}, {0xd000, 0xf02e}, 0x50010, 0x0, 0x2000, 0x0, 0x0, 0x8000, 0x100000, [0x3, 0xaee, 0x33c7, 0x100]}) [ 1547.173444][T16488] device .781 entered promiscuous mode [ 1547.252627][T16492] device .782 entered promiscuous mode 08:51:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000080)={0x0, 0x2}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0x4004550d, 0x0) 08:51:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x10000) recvfrom$rxrpc(r5, &(0x7f0000000200)=""/88, 0x58, 0x0, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, [], 0x1}, 0x4ad12bff}}, 0x24) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={r4, 0x4, 0xcc, "43548bf1875ef355b606b7f4dc77efbc5979521e406b4f4f280f571e6cb397e9cfaa4d8a5dd43f01e2d6c3c7d856b1a1538d48fde85a99227279bf5187dd45011aa56ad9cdd67663f8491e1ea5ee0bab055d87011ad0335462a00ac78b98d6369c005ef474e3e75b1e93abd115f8fc4901fc5071f0b6c272169170bd2657831b4b89ca9107459dae659248d693d71a33f46efadf2f0802f1a9cf0bf96a3b0aea9b4317825dc482066f3d605591bdb15ac22edc7a0b8e893ad8082b4c7ed78ccb2f93d373eda20108dbcf9e62"}, 0xd4) 08:51:24 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x9) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0xffffffffffff8000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001e00050f00550000000000000007000019361390ff6163399ed50bb4acbe809f31ab2cd5cdaf725c13fe057be48df39d230a49", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="fb23701951ce697eb94398ca2e85804df3113ce39c7893"], 0x28}}, 0x0) 08:51:24 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21180648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:24 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x129}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, 0x0) r4 = syz_open_dev$video(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000100)={0xd2de460addda38e, 0x1, 0x0, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fff}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="200047f9b7e00000000000008400000002000000000004020000000000000065efeb50a9cd96fa2da3ead79b03f655e4"], 0x20}], 0x1, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') ioctl$USBDEVFS_CONTROL(r7, 0x551f, 0x0) 08:51:24 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x129}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, 0x0) r4 = syz_open_dev$video(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000100)={0xd2de460addda38e, 0x1, 0x0, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fff}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="200047f9b7e00000000000008400000002000000000004020000000000000065efeb50a9cd96fa2da3ead79b03f655e4"], 0x20}], 0x1, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') ioctl$USBDEVFS_CONTROL(r7, 0x551f, 0x0) [ 1547.652062][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1547.707905][T16509] device .783 entered promiscuous mode 08:51:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) [ 1547.843637][T16522] device .784 entered promiscuous mode 08:51:25 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x129}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, 0x0) r4 = syz_open_dev$video(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000100)={0xd2de460addda38e, 0x1, 0x0, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fff}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="200047f9b7e00000000000008400000002000000000004020000000000000065efeb50a9cd96fa2da3ead79b03f655e4"], 0x20}], 0x1, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') ioctl$USBDEVFS_CONTROL(r7, 0x551f, 0x0) 08:51:25 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21280648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:25 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:51:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:25 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x129}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, 0x0) r4 = syz_open_dev$video(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000100)={0xd2de460addda38e, 0x1, 0x0, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fff}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="200047f9b7e00000000000008400000002000000000004020000000000000065efeb50a9cd96fa2da3ead79b03f655e4"], 0x20}], 0x1, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') ioctl$USBDEVFS_CONTROL(r7, 0x551f, 0x0) [ 1548.266470][T16538] device .785 entered promiscuous mode [ 1548.345214][T16546] FAULT_INJECTION: forcing a failure. [ 1548.345214][T16546] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.391269][T16546] CPU: 1 PID: 16546 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 1548.399891][T16546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.409986][T16546] Call Trace: [ 1548.413296][T16546] dump_stack+0x107/0x163 [ 1548.417708][T16546] should_fail.cold+0x5/0x1f [ 1548.422341][T16546] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1548.428110][T16546] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1548.433910][T16546] should_failslab+0x5/0x10 [ 1548.438493][T16546] __kmalloc+0x72/0x2e0 [ 1548.442694][T16546] tomoyo_realpath_from_path+0xc3/0x620 [ 1548.448320][T16546] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1548.454621][T16546] tomoyo_path_number_perm+0x1d5/0x570 [ 1548.460131][T16546] ? tomoyo_path_number_perm+0x18d/0x570 [ 1548.465822][T16546] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1548.471742][T16546] ? lock_downgrade+0x6d0/0x6d0 [ 1548.478484][T16546] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1548.484107][T16546] ? __fget_files+0x2e3/0x430 [ 1548.488833][T16546] security_file_ioctl+0x50/0xb0 [ 1548.493826][T16546] __x64_sys_ioctl+0xb3/0x200 [ 1548.498557][T16546] do_syscall_64+0x2d/0x70 [ 1548.503018][T16546] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1548.509036][T16546] RIP: 0033:0x45e149 [ 1548.512963][T16546] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1548.532703][T16546] RSP: 002b:00007f2862073c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1548.541339][T16546] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1548.549353][T16546] RDX: 0000000020000000 RSI: 0000000080045510 RDI: 0000000000000003 [ 1548.557353][T16546] RBP: 00007f2862073ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1548.565359][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.573359][T16546] R13: 00000000016afb7f R14: 00007f28620749c0 R15: 000000000119bf8c 08:51:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:25 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x129}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, 0x0) r4 = syz_open_dev$video(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000100)={0xd2de460addda38e, 0x1, 0x0, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7fff}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="200047f9b7e00000000000008400000002000000000004020000000000000065efeb50a9cd96fa2da3ead79b03f655e4"], 0x20}], 0x1, 0x0) io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') ioctl$USBDEVFS_CONTROL(r7, 0x551f, 0x0) 08:51:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:25 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21380648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:25 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1548.645468][T16546] ERROR: Out of memory at tomoyo_realpath_from_path. 08:51:25 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1548.759082][T16560] device .786 entered promiscuous mode 08:51:26 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, 0x0) [ 1548.822539][T16570] validate_nla: 7 callbacks suppressed [ 1548.822562][T16570] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1548.880373][T16573] FAULT_INJECTION: forcing a failure. [ 1548.880373][T16573] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.925763][T16573] CPU: 0 PID: 16573 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 1548.934806][T16573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.945158][T16573] Call Trace: [ 1548.948479][T16573] dump_stack+0x107/0x163 [ 1548.952879][T16573] should_fail.cold+0x5/0x1f [ 1548.957510][T16573] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1548.963273][T16573] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1548.969035][T16573] should_failslab+0x5/0x10 08:51:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x4e22, 0x7fffffff, @loopback}}, 0x0, 0x6, [{{0xa, 0x4e21, 0x5, @local, 0x2}}, {{0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa000000}}, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x72}}, {{0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, [], 0x26}, 0x8}}, {{0xa, 0x4e21, 0x1, @private0, 0x99d}}, {{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x85c}}]}, 0x390) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0x1, &(0x7f0000000440)="e1cf3689a7b4aad8263bf78d79c5b4a891c0ddd7e12461043065f09d0748eaf9bde0c154f06b1b163c50fe758f0bd3de823a72a218412aa03f10f6766d3d3ff0d31263272bc31ede4521a19a651f5bc937ef7252950d333d3feef1166b93be585320442039ee4bccf140b52d984961ce85d3eab7fc308f252d04277151df5449c3ef5154d07c9fbb55097f21747873dd8b7b7ff418c514e7a9936388ed5c774718587f24919387084149b37cc6a9e9f9bf8a7d291304ddbd0ffafc6180eeb4826a757e47fa0ca38b01", &(0x7f0000000540)=""/211}, 0x20) [ 1548.973568][T16573] __kmalloc+0x72/0x2e0 [ 1548.977769][T16573] tomoyo_realpath_from_path+0xc3/0x620 [ 1548.983363][T16573] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1548.989651][T16573] tomoyo_path_number_perm+0x1d5/0x570 [ 1548.995179][T16573] ? tomoyo_path_number_perm+0x18d/0x570 [ 1549.001132][T16573] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1549.007022][T16573] ? lock_downgrade+0x6d0/0x6d0 [ 1549.011914][T16573] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1549.018606][T16573] ? __fget_files+0x2e3/0x430 [ 1549.023335][T16573] security_file_ioctl+0x50/0xb0 [ 1549.028408][T16573] __x64_sys_ioctl+0xb3/0x200 [ 1549.033120][T16573] do_syscall_64+0x2d/0x70 [ 1549.037871][T16573] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1549.043803][T16573] RIP: 0033:0x45e149 [ 1549.047736][T16573] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1549.067644][T16573] RSP: 002b:00007fa501b2bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.076098][T16573] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1549.084100][T16573] RDX: 0000000020000080 RSI: 0000000080085504 RDI: 0000000000000003 [ 1549.092188][T16573] RBP: 00007fa501b2bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.100702][T16573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.110005][T16573] R13: 00000000016afb7f R14: 00007fa501b2c9c0 R15: 000000000119bf8c [ 1549.135924][T16575] FAULT_INJECTION: forcing a failure. [ 1549.135924][T16575] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.152209][T16570] device .787 entered promiscuous mode 08:51:26 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1549.179115][T16575] CPU: 0 PID: 16575 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 1549.187618][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.197705][T16575] Call Trace: [ 1549.201014][T16575] dump_stack+0x107/0x163 [ 1549.205399][T16575] should_fail.cold+0x5/0x1f [ 1549.210072][T16575] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1549.215494][T16575] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1549.222208][T16575] should_failslab+0x5/0x10 08:51:26 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, 0x0) [ 1549.226750][T16575] __kmalloc+0x72/0x2e0 [ 1549.232420][T16575] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1549.238775][T16575] tomoyo_encode+0x28/0x50 [ 1549.243241][T16575] tomoyo_realpath_from_path+0x186/0x620 [ 1549.248931][T16575] tomoyo_path_number_perm+0x1d5/0x570 [ 1549.255737][T16575] ? tomoyo_path_number_perm+0x18d/0x570 [ 1549.261422][T16575] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1549.267747][T16575] ? lock_downgrade+0x6d0/0x6d0 [ 1549.272648][T16575] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1549.278262][T16575] ? __fget_files+0x2e3/0x430 [ 1549.282987][T16575] security_file_ioctl+0x50/0xb0 [ 1549.287969][T16575] __x64_sys_ioctl+0xb3/0x200 [ 1549.292698][T16575] do_syscall_64+0x2d/0x70 [ 1549.297954][T16575] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1549.303891][T16575] RIP: 0033:0x45e149 [ 1549.308493][T16575] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1549.328420][T16575] RSP: 002b:00007f2862073c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.336955][T16575] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1549.344963][T16575] RDX: 0000000020000000 RSI: 0000000080045510 RDI: 0000000000000003 [ 1549.354319][T16575] RBP: 00007f2862073ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.362323][T16575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.371858][T16575] R13: 00000000016afb7f R14: 00007f28620749c0 R15: 000000000119bf8c 08:51:26 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21480648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:26 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, 0x0) [ 1549.460711][T16573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1549.467474][T16573] usb usb9: usbfs: process 16573 (syz-executor.1) did not claim interface 0 before use [ 1549.482573][T16575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1549.490727][T16573] vhci_hcd: default hub control req: 010b v0000 i0000 l0 08:51:26 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1549.541418][T16588] FAULT_INJECTION: forcing a failure. [ 1549.541418][T16588] name failslab, interval 1, probability 0, space 0, times 0 08:51:26 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x260101) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200000, 0x10, 0x8}, 0x18) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={[], 0x11}, 0xfff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x400, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000100)) [ 1549.593126][T16588] CPU: 0 PID: 16588 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 1549.601613][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.611704][T16588] Call Trace: [ 1549.615014][T16588] dump_stack+0x107/0x163 [ 1549.619407][T16588] should_fail.cold+0x5/0x1f [ 1549.624051][T16588] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1549.629912][T16588] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1549.635684][T16588] should_failslab+0x5/0x10 [ 1549.640248][T16588] __kmalloc+0x72/0x2e0 [ 1549.644448][T16588] tomoyo_realpath_from_path+0xc3/0x620 [ 1549.650039][T16588] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1549.656341][T16588] tomoyo_path_number_perm+0x1d5/0x570 [ 1549.661881][T16588] ? tomoyo_path_number_perm+0x18d/0x570 [ 1549.668208][T16588] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1549.674113][T16588] ? lock_downgrade+0x6d0/0x6d0 [ 1549.679013][T16588] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1549.684628][T16588] ? __fget_files+0x2e3/0x430 [ 1549.689395][T16588] security_file_ioctl+0x50/0xb0 [ 1549.694384][T16588] __x64_sys_ioctl+0xb3/0x200 [ 1549.699116][T16588] do_syscall_64+0x2d/0x70 [ 1549.703586][T16588] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1549.709623][T16588] RIP: 0033:0x45e149 [ 1549.713553][T16588] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1549.733202][T16588] RSP: 002b:00007fb4b35e5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:51:26 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1549.741835][T16588] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1549.749837][T16588] RDX: 0000000020000080 RSI: 0000000080085504 RDI: 0000000000000003 [ 1549.759026][T16588] RBP: 00007fb4b35e5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.768159][T16588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.777055][T16588] R13: 00000000016afb7f R14: 00007fb4b35e69c0 R15: 000000000119bf8c [ 1549.807710][T16588] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1549.812946][T16592] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1549.814777][T16588] usb usb9: usbfs: process 16588 (syz-executor.3) did not claim interface 0 before use [ 1549.832864][T16588] vhci_hcd: default hub control req: 010b v0000 i0000 l0 08:51:27 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1549.896128][T16603] FAULT_INJECTION: forcing a failure. [ 1549.896128][T16603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.916335][T16599] FAULT_INJECTION: forcing a failure. [ 1549.916335][T16599] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.920872][T16592] device .788 entered promiscuous mode [ 1549.958665][T16603] CPU: 0 PID: 16603 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 1549.967163][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.978455][T16603] Call Trace: [ 1549.983077][T16603] dump_stack+0x107/0x163 [ 1549.987670][T16603] should_fail.cold+0x5/0x1f [ 1549.993509][T16603] _copy_to_user+0x2c/0x150 [ 1549.998148][T16603] simple_read_from_buffer+0xcc/0x160 [ 1550.004139][T16603] proc_fail_nth_read+0x187/0x220 [ 1550.010538][T16603] ? proc_fault_inject_read+0x220/0x220 [ 1550.016217][T16603] ? security_file_permission+0x248/0x560 [ 1550.022559][T16603] ? proc_fault_inject_read+0x220/0x220 [ 1550.028158][T16603] vfs_read+0x1b5/0x570 [ 1550.033267][T16603] ksys_read+0x12d/0x250 [ 1550.038210][T16603] ? vfs_write+0xa80/0xa80 [ 1550.043527][T16603] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1550.049718][T16603] do_syscall_64+0x2d/0x70 [ 1550.055033][T16603] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1550.060972][T16603] RIP: 0033:0x417a41 [ 1550.065868][T16603] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1550.085696][T16603] RSP: 002b:00007f2862073c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 1550.094874][T16603] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417a41 [ 1550.102878][T16603] RDX: 000000000000000f RSI: 00007f2862073cb0 RDI: 0000000000000004 [ 1550.111211][T16603] RBP: 00007f2862073ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1550.119213][T16603] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1550.127209][T16603] R13: 00000000016afb7f R14: 00007f28620749c0 R15: 000000000119bf8c [ 1550.135232][T16599] CPU: 1 PID: 16599 Comm: syz-executor.1 Not tainted 5.10.0-syzkaller #0 [ 1550.143688][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1550.153796][T16599] Call Trace: [ 1550.157099][T16599] dump_stack+0x107/0x163 [ 1550.161468][T16599] should_fail.cold+0x5/0x1f [ 1550.166091][T16599] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1550.171498][T16599] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1550.176910][T16599] should_failslab+0x5/0x10 [ 1550.181449][T16599] __kmalloc+0x72/0x2e0 [ 1550.185632][T16599] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1550.190872][T16599] tomoyo_encode+0x28/0x50 [ 1550.195323][T16599] tomoyo_realpath_from_path+0x186/0x620 [ 1550.201003][T16599] tomoyo_path_number_perm+0x1d5/0x570 [ 1550.207653][T16599] ? tomoyo_path_number_perm+0x18d/0x570 [ 1550.213326][T16599] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1550.220665][T16599] ? lock_downgrade+0x6d0/0x6d0 [ 1550.226472][T16599] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1550.232072][T16599] ? __fget_files+0x2e3/0x430 [ 1550.237545][T16599] security_file_ioctl+0x50/0xb0 [ 1550.242520][T16599] __x64_sys_ioctl+0xb3/0x200 [ 1550.247861][T16599] do_syscall_64+0x2d/0x70 [ 1550.252311][T16599] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1550.259740][T16599] RIP: 0033:0x45e149 [ 1550.264090][T16599] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1550.283741][T16599] RSP: 002b:00007fa501b2bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1550.292195][T16599] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1550.300191][T16599] RDX: 0000000020000080 RSI: 0000000080085504 RDI: 0000000000000003 08:51:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1550.308549][T16599] RBP: 00007fa501b2bca0 R08: 0000000000000000 R09: 0000000000000000 [ 1550.317269][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.325665][T16599] R13: 00000000016afb7f R14: 00007fa501b2c9c0 R15: 000000000119bf8c 08:51:27 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:27 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21580648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1550.461577][T16613] FAULT_INJECTION: forcing a failure. [ 1550.461577][T16613] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.526839][T16613] CPU: 1 PID: 16613 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 1550.535341][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1550.546968][T16613] Call Trace: [ 1550.550646][T16613] dump_stack+0x107/0x163 [ 1550.555125][T16613] should_fail.cold+0x5/0x1f [ 1550.559981][T16613] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1550.565448][T16613] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1550.570941][T16613] should_failslab+0x5/0x10 08:51:27 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1550.575492][T16613] __kmalloc+0x72/0x2e0 [ 1550.579689][T16613] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1550.585052][T16613] tomoyo_encode+0x28/0x50 [ 1550.590895][T16613] tomoyo_realpath_from_path+0x186/0x620 [ 1550.596804][T16613] tomoyo_path_number_perm+0x1d5/0x570 [ 1550.602453][T16613] ? tomoyo_path_number_perm+0x18d/0x570 [ 1550.608270][T16613] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1550.615121][T16613] ? lock_downgrade+0x6d0/0x6d0 [ 1550.621607][T16613] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1550.628546][T16613] ? __fget_files+0x2e3/0x430 [ 1550.633514][T16613] security_file_ioctl+0x50/0xb0 [ 1550.638517][T16613] __x64_sys_ioctl+0xb3/0x200 [ 1550.643252][T16613] do_syscall_64+0x2d/0x70 [ 1550.647719][T16613] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1550.653787][T16613] RIP: 0033:0x45e149 [ 1550.658553][T16613] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1550.680042][T16613] RSP: 002b:00007fb4b35e5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1550.690441][T16613] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1550.698761][T16613] RDX: 0000000020000080 RSI: 0000000080085504 RDI: 0000000000000003 [ 1550.707070][T16613] RBP: 00007fb4b35e5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1550.715808][T16613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 08:51:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x2, &(0x7f0000000000)=0x4) [ 1550.723818][T16613] R13: 00000000016afb7f R14: 00007fb4b35e69c0 R15: 000000000119bf8c [ 1550.787028][T16619] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1550.851808][T16619] device .789 entered promiscuous mode 08:51:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1550.923340][T16629] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x10, &(0x7f0000000000)=0x4) [ 1550.967642][T16629] device .790 entered promiscuous mode [ 1551.176515][T16599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1551.207050][T16599] usb usb9: usbfs: process 16599 (syz-executor.1) did not claim interface 0 before use [ 1551.239208][T16599] vhci_hcd: default hub control req: 010b v0000 i0000 l0 08:51:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:28 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21680648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1551.369130][T16613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1551.398827][T16613] usb usb9: usbfs: process 16613 (syz-executor.3) did not claim interface 0 before use [ 1551.447717][T16640] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1551.474478][T16613] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 1551.510919][T16640] device .791 entered promiscuous mode [ 1551.534102][T16645] usb usb9: usbfs: process 16645 (syz-executor.1) did not claim interface 0 before use 08:51:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x127a, &(0x7f0000000000)=0x4) 08:51:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1551.558286][T16646] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:28 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x2, &(0x7f0000000080)) [ 1551.626182][T16646] device .792 entered promiscuous mode 08:51:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4b35, &(0x7f0000000000)=0x4) 08:51:28 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1551.705241][T16654] usb usb9: usbfs: process 16654 (syz-executor.3) did not claim interface 0 before use 08:51:28 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21780648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1551.800295][T16654] vhci_hcd: default hub control req: 010b v0000 i0000 l0 08:51:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x10, &(0x7f0000000080)) 08:51:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x2, &(0x7f0000000080)) [ 1551.907165][T16663] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4c01, &(0x7f0000000000)=0x4) 08:51:29 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1552.026167][T16663] device .793 entered promiscuous mode [ 1552.086029][T16673] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x10, &(0x7f0000000080)) 08:51:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4c00, &(0x7f0000000080)) 08:51:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x541b, &(0x7f0000000000)=0x4) [ 1552.183599][T16673] device .794 entered promiscuous mode 08:51:29 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, 0x0) 08:51:29 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21880648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x227a, &(0x7f0000000080)) 08:51:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4c01, &(0x7f0000000080)) 08:51:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5421, &(0x7f0000000000)=0x4) 08:51:29 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, 0x0) [ 1552.497694][T16688] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1552.603041][T16688] device .795 entered promiscuous mode 08:51:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4c01, &(0x7f0000000080)) 08:51:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x541b, &(0x7f0000000080)) [ 1552.673116][T16700] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5450, &(0x7f0000000000)=0x4) 08:51:29 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, 0x0) [ 1552.760825][T16700] device .796 entered promiscuous mode 08:51:30 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21980648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x541b, &(0x7f0000000080)) 08:51:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5421, &(0x7f0000000080)) 08:51:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5451, &(0x7f0000000000)=0x4) 08:51:30 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1553.115195][T16713] device .797 entered promiscuous mode 08:51:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5421, &(0x7f0000000080)) [ 1553.173441][T16723] FAULT_INJECTION: forcing a failure. [ 1553.173441][T16723] name failslab, interval 1, probability 0, space 0, times 0 08:51:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5452, &(0x7f0000000000)=0x4) 08:51:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5450, &(0x7f0000000080)) [ 1553.223403][T16724] device .798 entered promiscuous mode [ 1553.285863][T16723] CPU: 0 PID: 16723 Comm: syz-executor.4 Not tainted 5.10.0-syzkaller #0 [ 1553.294353][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1553.304531][T16723] Call Trace: [ 1553.307851][T16723] dump_stack+0x107/0x163 [ 1553.312255][T16723] should_fail.cold+0x5/0x1f [ 1553.316880][T16723] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1553.324018][T16723] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1553.329786][T16723] should_failslab+0x5/0x10 [ 1553.334319][T16723] __kmalloc+0x72/0x2e0 [ 1553.338507][T16723] tomoyo_realpath_from_path+0xc3/0x620 [ 1553.344091][T16723] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1553.350386][T16723] tomoyo_path_number_perm+0x1d5/0x570 [ 1553.355887][T16723] ? tomoyo_path_number_perm+0x18d/0x570 [ 1553.361561][T16723] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1553.368678][T16723] ? lock_downgrade+0x6d0/0x6d0 [ 1553.373571][T16723] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1553.379167][T16723] ? __fget_files+0x2e3/0x430 [ 1553.383881][T16723] security_file_ioctl+0x50/0xb0 [ 1553.389228][T16723] __x64_sys_ioctl+0xb3/0x200 [ 1553.395421][T16723] do_syscall_64+0x2d/0x70 [ 1553.399883][T16723] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1553.405812][T16723] RIP: 0033:0x45e149 [ 1553.409732][T16723] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1553.430489][T16723] RSP: 002b:00007fcbb4322c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1553.439032][T16723] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1553.447031][T16723] RDX: 0000000000000000 RSI: 0000000080045510 RDI: 0000000000000003 [ 1553.455023][T16723] RBP: 00007fcbb4322ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1553.463018][T16723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.471011][T16723] R13: 00000000016afb7f R14: 00007fcbb43239c0 R15: 000000000119bf8c 08:51:30 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5460, &(0x7f0000000000)=0x4) 08:51:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5450, &(0x7f0000000080)) 08:51:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5451, &(0x7f0000000080)) [ 1553.735504][T16735] device .799 entered promiscuous mode 08:51:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x550b, &(0x7f0000000000)=0x4) 08:51:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5451, &(0x7f0000000080)) [ 1553.868367][T16743] device .800 entered promiscuous mode 08:51:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5452, &(0x7f0000000080)) 08:51:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5514, &(0x7f0000000000)=0x4) [ 1554.322244][T16723] ERROR: Out of memory at tomoyo_realpath_from_path. 08:51:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:31 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21b80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5452, &(0x7f0000000080)) 08:51:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5460, &(0x7f0000000080)) 08:51:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x551f, &(0x7f0000000000)=0x4) [ 1554.470785][T16759] validate_nla: 4 callbacks suppressed [ 1554.470809][T16759] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5460, &(0x7f0000000080)) 08:51:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x2, 0x0) [ 1554.605437][T16759] device .801 entered promiscuous mode 08:51:31 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x550b, &(0x7f0000000080)) 08:51:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5521, &(0x7f0000000000)=0x4) [ 1554.722904][T16771] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1554.794891][T16771] device .802 entered promiscuous mode 08:51:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x550b, &(0x7f0000000080)) 08:51:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5522, &(0x7f0000000000)=0x4) 08:51:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x10, 0x0) 08:51:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5514, &(0x7f0000000080)) 08:51:32 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21c80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x5523, &(0x7f0000000000)=0x4) 08:51:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4c01, 0x0) [ 1555.062198][T16790] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x551f, &(0x7f0000000080)) 08:51:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5514, &(0x7f0000000080)) [ 1555.174306][T16790] device .803 entered promiscuous mode [ 1555.222481][T16798] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x6364, &(0x7f0000000000)=0x4) 08:51:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x541b, 0x0) 08:51:32 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x48080) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x2, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10000000) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001188}, 0x4040000) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x400004, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x400500, 0x0) [ 1555.320241][T16798] device .804 entered promiscuous mode 08:51:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x551f, &(0x7f0000000080)) 08:51:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5521, &(0x7f0000000080)) 08:51:32 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21d80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5421, 0x0) 08:51:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8912, &(0x7f0000000000)=0x4) 08:51:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, &(0x7f0000000080)) 08:51:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x68181) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="1b000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={r2, @in={{0x2, 0x4e23, @multicast1}}, [0x3ff, 0xff, 0x885, 0x5, 0x0, 0x0, 0x5, 0x3, 0xffffffffffff01a9, 0x2, 0x6, 0x7, 0xff80000000, 0x59e5, 0x8000]}, &(0x7f0000000240)=0x100) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') accept4$unix(r3, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80800) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) [ 1555.598803][T16819] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5521, &(0x7f0000000080)) [ 1555.686188][T16819] device .805 entered promiscuous mode 08:51:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5450, 0x0) [ 1555.733171][T16829] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8913, &(0x7f0000000000)=0x4) [ 1555.814465][T16829] device .806 entered promiscuous mode 08:51:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5523, &(0x7f0000000080)) 08:51:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5522, &(0x7f0000000080)) 08:51:33 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d21e80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5451, 0x0) 08:51:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8914, &(0x7f0000000000)=0x4) [ 1556.022245][T16846] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x5523, &(0x7f0000000080)) 08:51:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x6364, &(0x7f0000000080)) [ 1556.068499][T16846] device .807 entered promiscuous mode [ 1556.107590][T16849] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1556.168274][T16849] device .808 entered promiscuous mode 08:51:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5452, 0x0) 08:51:33 executing program 5: r0 = gettid() ptrace(0x10, r0) tgkill(0xffffffffffffffff, r0, 0x3b) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0x550b, 0x0) 08:51:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8933, &(0x7f0000000000)=0x4) 08:51:33 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22180648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x6364, &(0x7f0000000080)) 08:51:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8902, &(0x7f0000000080)) 08:51:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5460, 0x0) 08:51:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x54a3, 0x0) [ 1556.603623][T16875] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xf507, &(0x7f0000000000)=0x4) 08:51:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8912, &(0x7f0000000080)) 08:51:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8912, &(0x7f0000000080)) [ 1556.677853][T16875] device .809 entered promiscuous mode 08:51:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x400448c9, &(0x7f0000000000)=0x4) 08:51:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000)) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000080)=0x40) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) [ 1556.780824][T16882] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1556.860631][T16882] device .810 entered promiscuous mode 08:51:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5501, 0x0) 08:51:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8913, &(0x7f0000000080)) 08:51:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22280648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8913, &(0x7f0000000080)) 08:51:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x400448dd, &(0x7f0000000000)=0x4) 08:51:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_generic(r2, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3e4, 0x39, 0x400, 0x70bd25, 0x25dfdbfb, {0x13}, [@nested={0x3b4, 0x38, 0x0, 0x1, [@generic="bb69f05726fce37fbf388ea1cb85859120f99805882b9bb801791ed2db5c4f03576283fcb95c805e4a77a94140aea8421946db13eca6855243ba2b7cdb1438a96186b1c4dc03376d9a9b3b294cae85b8b2667996c1148f0b3bd4692ba9a82d807c207cfe60980b2e9d9833bc3ba41dc194c4c9427627ea0c64e6b2996637e3dbfb824a19e319616e306c55847ab936d4e2480b81889e00231ec6881dbf", @generic="29b250bde03e0e31e2bfa0d46839", @typed={0x14, 0x68, 0x0, 0x0, @ipv6=@ipv4={[], [], @private=0xa010102}}, @generic="e80bcca002954036074ea031a35bda99cf80b6f84ccdaec8743fccc8e1259dee6318c6a039b2940f96d0de2257703557e6499d64a0bfa3c3a6e670269e8a2528fd0453e96d8d359b0122dd20db5e98093642cf5e71b364513b40f3bdc8119ca482ae7fe1668eaea903c4beffabd03c38ff5f242fed4977e73349f6b7bbc59e38e0f8fda22c448087985f0a7836cc8fd0a76a0439e25f01cf67801cc17f0568b6cdcef5b52e36b0cbe64c61078a01fc90e16317f569bb4691d59a49c90b5578c1cd17f1cccfd0c497e3f459b020bef0da68bb4c50dd23e30c8609", @generic="d8069ac19b3e0284aaeeb78728567a3c8c98d5cfcebed994b5e36265f4f0c20b47a285e793924db2e9bf22295848227d4c05fe72b3af4fa20ff7f44a3cd06e12d1ac17b867d0732bddfda82ababf57c9e8517b6d26576e069546c8afaae4534ac707fccd284c77a10e07539591d95c96895ed1feb394d0efd6f38e9631bcd6fbe13de377e4fcea521adb072502b74816c38097c1d99a63", @generic="b70bad3d0e92ec6dc0f260970931b5d00734090663945cc515ac6c248f9820e23bf188b630751a4b4f09350bcfbe68f122c80086a5ec1bbe6930eca1d0117e3a082e6a481b630a5f47088ba457a312fe60d7b1ad366f90a8bc7cf993cde1077a261e95b836b3572b8b76a3e599ff62dc9673ffa048ef27e3426f2bc7e8aab22a6ad80426b71248ba356d028afa7eb27678262e3767eaf553066b9a2df88496c4baa574712c3bdfba366bc8372909d8e4da3d55bd590c", @generic="dd41848f5c40eb265a7b77a095d819333a0dfac0a81b9d198df4fcd98ec1dff85445ab2a2f6e6b9ddcf32708e5eb6346dcca539766300dfadc36626031d67a0c632edc49b801e24f46f1cb986db3b2e3af8879d316dc834c88e9cf947ec84453098fc537c9d47977eea42fa4edba84c31aff55911dcdbce35ecfa9928f0d248292d8947d8323ba2d62bcbe4eb789bf4017afcd075fc0283dcdec6af3eba0435ea62cba91a11bf932aace6868fb0ec889b5799bc012618f1286280eef024228d3f57addc8f9013143178f"]}, @typed={0x19, 0x63, 0x0, 0x0, @str='/dev/bus/usb/00#/00#\x00'}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x22044c01}, 0x60048880) 08:51:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5509, 0x0) 08:51:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8914, &(0x7f0000000080)) [ 1557.142724][T16907] device .811 entered promiscuous mode 08:51:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8914, &(0x7f0000000080)) 08:51:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x400454ca, &(0x7f0000000000)=0x4) [ 1557.264748][T16913] device .812 entered promiscuous mode 08:51:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000100)=0x16) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getuid() setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000000)=0x5ff, 0x4) r3 = dup(0xffffffffffffffff) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xffff8001, 0x4) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x84003) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TIOCGPTPEER(r5, 0x5441, 0x10000) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000200)) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000001c0)) 08:51:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22380648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004550c, &(0x7f0000000000)=0x4) 08:51:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8916, &(0x7f0000000080)) 08:51:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8916, &(0x7f0000000080)) 08:51:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5514, 0x0) [ 1557.585375][T16932] device .813 entered promiscuous mode 08:51:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8933, &(0x7f0000000080)) 08:51:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400440, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x80010, r3, 0x0) 08:51:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8933, &(0x7f0000000080)) [ 1557.702599][T16942] device .814 entered promiscuous mode 08:51:34 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x551f, 0x0) 08:51:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22480648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r1 = dup(r0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 08:51:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8936, &(0x7f0000000080)) 08:51:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8936, &(0x7f0000000080)) [ 1557.910914][T16957] device .815 entered promiscuous mode [ 1557.964518][T16966] device .816 entered promiscuous mode 08:51:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004550d, &(0x7f0000000000)=0x4) 08:51:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xf502, &(0x7f0000000080)) 08:51:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5521, 0x0) 08:51:35 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:35 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22580648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8940, &(0x7f0000000080)) [ 1558.483329][T16977] device .817 entered promiscuous mode 08:51:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5522, 0x0) 08:51:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x48980) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) 08:51:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8946, &(0x7f0000000080)) 08:51:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x400448c9, &(0x7f0000000080)) [ 1558.595080][T16986] device .818 entered promiscuous mode 08:51:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4004551e, &(0x7f0000000000)=0x4) 08:51:35 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22680648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xae01, &(0x7f0000000080)) 08:51:35 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x5523, 0x0) 08:51:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1) 08:51:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x40049409, &(0x7f0000000000)=0x4) 08:51:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x400448dd, &(0x7f0000000080)) 08:51:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x6364, 0x0) 08:51:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xae41, &(0x7f0000000080)) [ 1558.964423][T17007] device .819 entered promiscuous mode 08:51:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x400454ca, &(0x7f0000000080)) 08:51:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4008550c, &(0x7f0000000000)=0x4) 08:51:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000076, 0x6c181) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000000)) [ 1559.092523][T17017] device .820 entered promiscuous mode 08:51:36 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22780648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8904, 0x0) 08:51:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x400454d8, &(0x7f0000000080)) 08:51:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xae60, &(0x7f0000000080)) 08:51:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf99, 0x3b}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000200)=0x100) [ 1559.324983][T17033] device .821 entered promiscuous mode [ 1559.376494][T17040] device .822 entered promiscuous mode [ 1559.386873][T17044] vhci_hcd: invalid port number 0 08:51:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8912, 0x0) [ 1559.426355][T17047] vhci_hcd: invalid port number 0 08:51:36 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22880648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4004550c, &(0x7f0000000080)) 08:51:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xf502, &(0x7f0000000080)) 08:51:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x100, 0x0) fcntl$notify(r1, 0x402, 0x22) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) syz_open_dev$char_raw(&(0x7f0000000180)='/dev/raw/raw#\x00', 0x1, 0x248e00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) open$dir(&(0x7f0000000080)='./file0\x00', 0x492800, 0x100) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000000)={0x2, 0x3, 0x3f, 0x800, 0xe343, 0x40}) [ 1559.569800][T17051] validate_nla: 12 callbacks suppressed [ 1559.569826][T17051] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1559.648063][T17051] device .823 entered promiscuous mode [ 1559.674513][T17062] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1559.705117][T17062] device .824 entered promiscuous mode 08:51:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4008550d, &(0x7f0000000000)=0x4) 08:51:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8913, 0x0) 08:51:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x400448c9, &(0x7f0000000080)) 08:51:37 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0x550b, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x2000, 0x0) 08:51:37 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22980648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8914, 0x0) [ 1560.145729][T17074] vhci_hcd: invalid port number 0 [ 1560.155832][T17072] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1560.184306][T17076] vhci_hcd: invalid port number 0 08:51:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x400448dd, &(0x7f0000000080)) [ 1560.214530][T17072] device .825 entered promiscuous mode 08:51:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x40085511, &(0x7f0000000000)=0x4) 08:51:37 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1560.267556][T17079] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1560.348596][T17079] device .826 entered promiscuous mode [ 1560.440803][T17091] FAULT_INJECTION: forcing a failure. [ 1560.440803][T17091] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.486032][T17091] CPU: 1 PID: 17091 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 1560.494529][T17091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1560.504619][T17091] Call Trace: [ 1560.507924][T17091] dump_stack+0x107/0x163 [ 1560.512302][T17091] should_fail.cold+0x5/0x1f [ 1560.516934][T17091] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1560.522788][T17091] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1560.528549][T17091] should_failslab+0x5/0x10 [ 1560.533086][T17091] __kmalloc+0x72/0x2e0 [ 1560.537281][T17091] tomoyo_realpath_from_path+0xc3/0x620 [ 1560.542867][T17091] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1560.549154][T17091] tomoyo_path_number_perm+0x1d5/0x570 [ 1560.554647][T17091] ? tomoyo_path_number_perm+0x18d/0x570 [ 1560.560331][T17091] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1560.566388][T17091] ? lock_downgrade+0x6d0/0x6d0 [ 1560.571271][T17091] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1560.576869][T17091] ? __fget_files+0x2e3/0x430 [ 1560.581587][T17091] security_file_ioctl+0x50/0xb0 [ 1560.586559][T17091] __x64_sys_ioctl+0xb3/0x200 [ 1560.591269][T17091] do_syscall_64+0x2d/0x70 [ 1560.595740][T17091] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1560.601663][T17091] RIP: 0033:0x45e149 [ 1560.605582][T17091] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1560.625224][T17091] RSP: 002b:00007fa083019c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:51:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4004550d, &(0x7f0000000080)) 08:51:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8933, 0x0) 08:51:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x400454ca, &(0x7f0000000080)) 08:51:37 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x40087705, &(0x7f0000000000)=0x4) [ 1560.633675][T17091] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1560.641686][T17091] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1560.649686][T17091] RBP: 00007fa083019ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1560.657692][T17091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1560.665693][T17091] R13: 00000000016afb7f R14: 00007fa08301a9c0 R15: 000000000119bf8c 08:51:37 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x89a0, 0x0) [ 1560.765123][T17091] ERROR: Out of memory at tomoyo_realpath_from_path. 08:51:38 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4004550c, &(0x7f0000000080)) [ 1560.841529][T17103] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x40186366, &(0x7f0000000000)=0x4) 08:51:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x89a1, 0x0) 08:51:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4004551e, &(0x7f0000000080)) 08:51:38 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1560.974952][T17103] device .827 entered promiscuous mode [ 1561.038498][T17110] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1561.083672][T17115] FAULT_INJECTION: forcing a failure. [ 1561.083672][T17115] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.116176][T17110] device .828 entered promiscuous mode [ 1561.153027][T17115] CPU: 0 PID: 17115 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 1561.162571][T17115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.172672][T17115] Call Trace: [ 1561.175978][T17115] dump_stack+0x107/0x163 [ 1561.180472][T17115] should_fail.cold+0x5/0x1f [ 1561.186738][T17115] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1561.193439][T17115] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1561.199796][T17115] should_failslab+0x5/0x10 [ 1561.204340][T17115] __kmalloc+0x72/0x2e0 [ 1561.208536][T17115] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1561.213786][T17115] tomoyo_encode+0x28/0x50 [ 1561.218338][T17115] tomoyo_realpath_from_path+0x186/0x620 [ 1561.224028][T17115] tomoyo_path_number_perm+0x1d5/0x570 [ 1561.229526][T17115] ? tomoyo_path_number_perm+0x18d/0x570 [ 1561.235221][T17115] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1561.241114][T17115] ? lock_downgrade+0x6d0/0x6d0 [ 1561.246009][T17115] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1561.251618][T17115] ? __fget_files+0x2e3/0x430 [ 1561.256482][T17115] security_file_ioctl+0x50/0xb0 [ 1561.261508][T17115] __x64_sys_ioctl+0xb3/0x200 [ 1561.266225][T17115] do_syscall_64+0x2d/0x70 [ 1561.274640][T17115] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1561.280763][T17115] RIP: 0033:0x45e149 [ 1561.284796][T17115] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1561.304441][T17115] RSP: 002b:00007fa083019c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1561.314246][T17115] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1561.323153][T17115] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1561.331994][T17115] RBP: 00007fa083019ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1561.341344][T17115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 08:51:38 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22b80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x40049409, &(0x7f0000000080)) [ 1561.350146][T17115] R13: 00000000016afb7f R14: 00007fa08301a9c0 R15: 000000000119bf8c 08:51:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x400448c9, 0x0) 08:51:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x4020940d, &(0x7f0000000000)=0x4) [ 1561.416417][T17115] ERROR: Out of memory at tomoyo_realpath_from_path. 08:51:38 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1561.489294][T17127] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4008550c, &(0x7f0000000080)) 08:51:38 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x400448dd, 0x0) [ 1561.569869][T17127] device .829 entered promiscuous mode [ 1561.643492][T17133] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1561.685249][T17133] device .830 entered promiscuous mode [ 1561.692388][T17137] FAULT_INJECTION: forcing a failure. [ 1561.692388][T17137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.742283][T17137] CPU: 1 PID: 17137 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 1561.750782][T17137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1561.760874][T17137] Call Trace: [ 1561.764182][T17137] dump_stack+0x107/0x163 [ 1561.768576][T17137] should_fail.cold+0x5/0x1f [ 1561.773224][T17137] _copy_from_user+0x2c/0x180 [ 1561.778091][T17137] usbdev_ioctl+0x129b/0x3b20 [ 1561.782811][T17137] ? processcompl_compat+0x680/0x680 [ 1561.788395][T17137] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1561.795767][T17137] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1561.802060][T17137] ? do_vfs_ioctl+0x27d/0x1090 [ 1561.806961][T17137] ? generic_block_fiemap+0x60/0x60 [ 1561.812215][T17137] ? lock_downgrade+0x6d0/0x6d0 [ 1561.817104][T17137] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1561.822718][T17137] ? __fget_files+0x2e3/0x430 [ 1561.827438][T17137] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1561.834287][T17137] ? processcompl_compat+0x680/0x680 [ 1561.840837][T17137] __x64_sys_ioctl+0x193/0x200 [ 1561.846208][T17137] do_syscall_64+0x2d/0x70 [ 1561.852049][T17137] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1561.858090][T17137] RIP: 0033:0x45e149 [ 1561.862676][T17137] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1561.882375][T17137] RSP: 002b:00007fa083019c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1561.890826][T17137] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 1561.898870][T17137] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1561.908054][T17137] RBP: 00007fa083019ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1561.916100][T17137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1561.924194][T17137] R13: 00000000016afb7f R14: 00007fa08301a9c0 R15: 000000000119bf8c 08:51:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4004550d, &(0x7f0000000080)) 08:51:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x41045508, &(0x7f0000000000)=0x4) 08:51:39 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22c80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x400454ca, 0x0) 08:51:39 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1562.091486][T17150] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4004550a, 0x0) 08:51:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80044dfd, &(0x7f0000000000)=0x4) [ 1562.162995][T17150] device .831 entered promiscuous mode 08:51:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4004551e, &(0x7f0000000080)) [ 1562.205833][T17157] FAULT_INJECTION: forcing a failure. [ 1562.205833][T17157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1562.261909][T17157] CPU: 0 PID: 17157 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 1562.270404][T17157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1562.280502][T17157] Call Trace: [ 1562.284080][T17157] dump_stack+0x107/0x163 [ 1562.288475][T17157] should_fail.cold+0x5/0x1f [ 1562.293120][T17157] __alloc_pages_nodemask+0x189/0x740 [ 1562.298581][T17157] ? __alloc_pages_slowpath.constprop.0+0x2260/0x2260 [ 1562.305395][T17157] ? find_held_lock+0x2d/0x110 [ 1562.310213][T17157] ? __might_fault+0xd3/0x180 [ 1562.314929][T17157] ? lock_downgrade+0x6d0/0x6d0 [ 1562.319839][T17157] alloc_pages_current+0x18c/0x2a0 [ 1562.325116][T17157] __get_free_pages+0x8/0x40 [ 1562.329758][T17157] do_proc_control+0x179/0x9c0 [ 1562.334599][T17157] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1562.340892][T17157] usbdev_ioctl+0x12c1/0x3b20 [ 1562.345737][T17157] ? processcompl_compat+0x680/0x680 [ 1562.351086][T17157] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1562.357039][T17157] ? do_vfs_ioctl+0x27d/0x1090 [ 1562.361873][T17157] ? generic_block_fiemap+0x60/0x60 [ 1562.367118][T17157] ? lock_downgrade+0x6d0/0x6d0 [ 1562.372022][T17157] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1562.377662][T17157] ? __fget_files+0x2e3/0x430 [ 1562.382430][T17157] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1562.388778][T17157] ? processcompl_compat+0x680/0x680 [ 1562.394143][T17157] __x64_sys_ioctl+0x193/0x200 [ 1562.399046][T17157] do_syscall_64+0x2d/0x70 [ 1562.403564][T17157] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1562.417678][T17157] RIP: 0033:0x45e149 [ 1562.421627][T17157] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1562.441280][T17157] RSP: 002b:00007fa083019c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1562.449960][T17157] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 08:51:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045503, &(0x7f0000000000)=0x4) 08:51:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x40049409, &(0x7f0000000080)) [ 1562.457988][T17157] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1562.466974][T17157] RBP: 00007fa083019ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1562.475060][T17157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1562.483298][T17157] R13: 00000000016afb7f R14: 00007fa08301a9c0 R15: 000000000119bf8c 08:51:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4008550d, &(0x7f0000000080)) 08:51:39 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22d80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:39 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, 0x0) 08:51:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045505, &(0x7f0000000000)=0x4) 08:51:39 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4008550c, &(0x7f0000000080)) [ 1562.712043][T17173] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x40085511, &(0x7f0000000080)) [ 1562.789095][T17173] device .832 entered promiscuous mode 08:51:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550a, &(0x7f0000000000)=0x4) 08:51:40 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22e80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x40186366, &(0x7f0000000080)) 08:51:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x4) 08:51:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4020940d, &(0x7f0000000080)) [ 1563.195342][T17192] device .833 entered promiscuous mode [ 1563.285255][T17198] device .834 entered promiscuous mode 08:51:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x2, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:40 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d22f80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1563.511582][T17208] device .835 entered promiscuous mode [ 1563.542627][T17213] device .836 entered promiscuous mode 08:51:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, 0x0) 08:51:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x41045508, &(0x7f0000000080)) 08:51:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4008550d, &(0x7f0000000080)) 08:51:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045515, &(0x7f0000000000)=0x4) 08:51:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x10, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:40 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23080648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045503, &(0x7f0000000080)) 08:51:40 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4004551e, 0x0) [ 1563.759997][T17226] device .837 entered promiscuous mode 08:51:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045518, &(0x7f0000000000)=0x4) 08:51:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x4c01, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x40085511, &(0x7f0000000080)) [ 1563.909917][T17233] device .838 entered promiscuous mode 08:51:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x40045612, 0x0) 08:51:41 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23180648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045505, &(0x7f0000000080)) 08:51:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x40086432, &(0x7f0000000080)) 08:51:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045519, &(0x7f0000000000)=0x4) 08:51:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x541b, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x40049409, 0x0) [ 1564.184541][T17250] device .839 entered promiscuous mode 08:51:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004551a, &(0x7f0000000000)=0x4) 08:51:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x40186366, &(0x7f0000000080)) 08:51:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8004550f, &(0x7f0000000080)) [ 1564.344646][T17264] device .840 entered promiscuous mode 08:51:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5421, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x40085503, 0x0) 08:51:41 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23280648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x4020940d, &(0x7f0000000080)) 08:51:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004551c, &(0x7f0000000000)=0x4) 08:51:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000080)) 08:51:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5450, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4008550c, 0x0) [ 1564.680873][T17284] validate_nla: 8 callbacks suppressed [ 1564.680898][T17284] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:41 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x41045508, &(0x7f0000000080)) [ 1564.767228][T17284] device .841 entered promiscuous mode 08:51:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004552f, &(0x7f0000000000)=0x4) 08:51:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045515, &(0x7f0000000080)) 08:51:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5451, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:42 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23380648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045503, &(0x7f0000000080)) 08:51:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8004555d, &(0x7f0000000000)=0x4) 08:51:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045518, &(0x7f0000000080)) 08:51:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5452, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1565.065243][T17306] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1565.172609][T17306] device .842 entered promiscuous mode 08:51:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80085504, &(0x7f0000000000)=0x4) 08:51:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045505, &(0x7f0000000080)) [ 1565.222084][T17317] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1565.317253][T17317] device .843 entered promiscuous mode 08:51:42 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4008550d, 0x0) 08:51:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5460, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8008550e, &(0x7f0000000000)=0x4) 08:51:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045519, &(0x7f0000000080)) 08:51:42 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23480648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8004550f, &(0x7f0000000080)) [ 1565.701654][T17334] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8004551a, &(0x7f0000000080)) 08:51:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8008551c, &(0x7f0000000000)=0x4) 08:51:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5501, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x40085511, 0x0) 08:51:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000080)) [ 1565.808063][T17334] device .844 entered promiscuous mode [ 1565.866235][T17344] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1565.932776][T17344] device .845 entered promiscuous mode 08:51:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085502, &(0x7f0000000080)) 08:51:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5509, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8008551d, &(0x7f0000000000)=0x4) 08:51:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x40186366, 0x0) 08:51:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045515, &(0x7f0000000080)) 08:51:43 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23580648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085503, &(0x7f0000000080)) 08:51:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80086301, &(0x7f0000000000)=0x4) 08:51:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x4020940d, 0x0) [ 1566.256191][T17369] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x550b, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045518, &(0x7f0000000080)) [ 1566.364052][T17369] device .846 entered promiscuous mode 08:51:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085505, &(0x7f0000000080)) [ 1566.411022][T17376] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8010550e, &(0x7f0000000000)=0x4) 08:51:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x41015500, 0x0) [ 1566.504018][T17376] device .847 entered promiscuous mode 08:51:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5514, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045519, &(0x7f0000000080)) 08:51:43 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23680648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085506, &(0x7f0000000080)) 08:51:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x802c550a, &(0x7f0000000000)=0x4) [ 1566.683977][T17395] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1566.711207][T17395] device .848 entered promiscuous mode 08:51:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x41045508, 0x0) 08:51:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8004551a, &(0x7f0000000080)) [ 1566.776857][T17400] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x551f, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1566.856559][T17400] device .849 entered promiscuous mode 08:51:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085507, &(0x7f0000000080)) 08:51:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8038550a, &(0x7f0000000000)=0x4) 08:51:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045503, 0x0) 08:51:44 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23780648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085502, &(0x7f0000000080)) 08:51:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5521, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085508, &(0x7f0000000080)) 08:51:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x8108551b, &(0x7f0000000000)=0x4) [ 1567.135796][T17421] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, 0x0) 08:51:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085503, &(0x7f0000000080)) [ 1567.264735][T17421] device .850 entered promiscuous mode 08:51:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5522, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085509, &(0x7f0000000080)) [ 1567.402068][T17431] device .851 entered promiscuous mode 08:51:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc0045878, &(0x7f0000000000)=0x4) 08:51:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8004550a, 0x0) 08:51:44 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23880648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008550e, &(0x7f0000000080)) 08:51:44 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085505, &(0x7f0000000080)) 08:51:44 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x5523, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, 0x0) 08:51:44 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc0045878, &(0x7f0000000000)=0x4) [ 1567.706880][T17447] device .852 entered promiscuous mode 08:51:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085510, &(0x7f0000000080)) [ 1567.806125][T17455] device .853 entered promiscuous mode 08:51:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085506, &(0x7f0000000080)) 08:51:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x6364, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045515, 0x0) 08:51:45 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23980648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc00c5512, &(0x7f0000000000)=0x4) 08:51:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085512, &(0x7f0000000080)) 08:51:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085507, &(0x7f0000000080)) 08:51:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8912, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc0105500, &(0x7f0000000000)=0x4) [ 1568.136300][T17475] device .854 entered promiscuous mode 08:51:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045518, 0x0) [ 1568.265837][T17481] device .855 entered promiscuous mode [ 1568.280147][T17491] vhci_hcd: default hub control req: 0400 v0000 i0000 l0 08:51:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085508, &(0x7f0000000080)) 08:51:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008551c, &(0x7f0000000080)) 08:51:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045519, 0x0) 08:51:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc0105502, &(0x7f0000000000)=0x4) 08:51:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8913, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:45 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008550e, &(0x7f0000000080)) 08:51:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008551d, &(0x7f0000000080)) 08:51:45 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc0105512, &(0x7f0000000000)=0x4) [ 1568.597347][T17503] device .856 entered promiscuous mode 08:51:45 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8914, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8004551a, 0x0) [ 1568.671201][T17510] device .857 entered promiscuous mode 08:51:45 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085510, &(0x7f0000000080)) 08:51:46 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23b80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008554e, &(0x7f0000000080)) 08:51:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8004551c, 0x0) 08:51:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc0185500, &(0x7f0000000000)=0x4) 08:51:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8933, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085512, &(0x7f0000000080)) [ 1568.992297][T17528] device .858 entered promiscuous mode [ 1569.001970][T17537] vhci_hcd: default hub control req: 0400 v0000 i0000 l0 08:51:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8004552f, 0x0) 08:51:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x400448c9, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1569.084162][T17538] device .859 entered promiscuous mode 08:51:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008556c, &(0x7f0000000080)) 08:51:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc0185502, &(0x7f0000000000)=0x4) 08:51:46 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23c80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008551c, &(0x7f0000000080)) 08:51:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x400448dd, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8004555d, 0x0) 08:51:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80086301, &(0x7f0000000080)) [ 1569.397628][T17553] device .860 entered promiscuous mode 08:51:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc0189436, &(0x7f0000000000)=0x4) 08:51:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008551d, &(0x7f0000000080)) [ 1569.507129][T17560] device .861 entered promiscuous mode 08:51:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80085502, 0x0) 08:51:46 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x400454ca, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:46 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23d80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8010550e, &(0x7f0000000080)) 08:51:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0xc020660b, &(0x7f0000000000)=0x4) 08:51:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008556c, &(0x7f0000000080)) [ 1569.776912][T17578] validate_nla: 11 callbacks suppressed [ 1569.776938][T17578] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80085504, 0x0) 08:51:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x2) [ 1569.841615][T17578] device .862 entered promiscuous mode 08:51:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x4004550a, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1569.882624][T17585] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x802c550a, &(0x7f0000000080)) [ 1569.943954][T17585] device .863 entered promiscuous mode 08:51:47 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d23e80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80086301, &(0x7f0000000080)) 08:51:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x3) 08:51:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8008550e, 0x0) 08:51:47 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8038550a, &(0x7f0000000080)) [ 1570.143685][T17599] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1570.221803][T17599] device .864 entered promiscuous mode 08:51:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, 0x0) 08:51:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x800c6613, &(0x7f0000000080)) [ 1570.297054][T17613] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x5) 08:51:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8108551b, &(0x7f0000000080)) [ 1570.409746][T17613] device .865 entered promiscuous mode 08:51:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8008551d, 0x0) 08:51:47 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24180648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:47 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8010550e, &(0x7f0000000080)) 08:51:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x6) 08:51:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0045878, &(0x7f0000000080)) 08:51:47 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80086301, 0x0) [ 1570.662325][T17629] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1570.727215][T17629] device .866 entered promiscuous mode [ 1570.789799][T17637] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1570.812770][T17637] device .867 entered promiscuous mode 08:51:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x4004550d, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x802c550a, &(0x7f0000000080)) 08:51:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0045878, &(0x7f0000000080)) 08:51:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x7) 08:51:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8010550e, 0x0) 08:51:48 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24280648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, 0x0) [ 1571.107028][T17653] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8038550a, &(0x7f0000000080)) 08:51:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x8) 08:51:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc004743e, &(0x7f0000000080)) [ 1571.173479][T17653] device .868 entered promiscuous mode 08:51:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x4004551e, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1571.253590][T17659] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, 0x0) 08:51:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8108551b, &(0x7f0000000080)) [ 1571.349830][T17659] device .869 entered promiscuous mode 08:51:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc00c5512, &(0x7f0000000080)) 08:51:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, 0x0) 08:51:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x10) 08:51:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x40049409, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:48 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24380648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x12) 08:51:48 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0045878, &(0x7f0000000080)) [ 1571.606335][T17685] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:48 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x40085503, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0105500, &(0x7f0000000080)) 08:51:48 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x8208ae63, 0x0) [ 1571.701180][T17685] device .870 entered promiscuous mode 08:51:49 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24480648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1571.810751][T17700] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 08:51:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x1c) 08:51:49 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0045878, &(0x7f0000000080)) 08:51:49 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x4008550c, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, 0x0) 08:51:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0105502, &(0x7f0000000080)) [ 1572.008468][T17710] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1572.051297][T17710] device .871 entered promiscuous mode 08:51:49 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc008ae88, &(0x7f0000000080)) 08:51:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, 0x0) [ 1572.143461][T17717] device .872 entered promiscuous mode 08:51:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0105512, &(0x7f0000000080)) 08:51:49 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24580648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:49 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc00c5512, &(0x7f0000000080)) 08:51:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc004743e, 0x0) 08:51:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0185500, &(0x7f0000000080)) [ 1572.391093][T17728] device .873 entered promiscuous mode [ 1572.464166][T17733] device .874 entered promiscuous mode [ 1572.474239][T17739] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 08:51:49 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0085504, 0x0) 08:51:49 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0105500, &(0x7f0000000080)) [ 1572.633383][T17743] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 08:51:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x4008550d, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:50 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24680648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0185502, &(0x7f0000000080)) 08:51:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc00c5512, 0x0) 08:51:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0105502, &(0x7f0000000080)) 08:51:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) [ 1572.936817][T17749] device .875 entered promiscuous mode 08:51:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0105512, &(0x7f0000000080)) 08:51:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0189436, &(0x7f0000000080)) [ 1572.994580][T17757] device .876 entered promiscuous mode 08:51:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x40085511, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:50 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24780648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0105502, 0x0) 08:51:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x401845ef, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0185500, &(0x7f0000000080)) 08:51:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc020660b, &(0x7f0000000080)) [ 1573.241886][T17769] device .877 entered promiscuous mode [ 1573.321614][T17774] device .878 entered promiscuous mode [ 1573.350526][T17782] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 08:51:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0105512, 0x0) 08:51:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x40186366, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0585604, &(0x7f0000000080)) 08:51:50 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24880648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0185502, &(0x7f0000000080)) 08:51:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 08:51:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x4020940d, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc08c5336, &(0x7f0000000080)) [ 1573.616943][T17788] device .879 entered promiscuous mode 08:51:50 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc0189436, &(0x7f0000000080)) [ 1573.719154][T17795] device .880 entered promiscuous mode 08:51:50 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185502, 0x0) 08:51:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x402c5639, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:51 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24980648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:51:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0xc020660b, &(0x7f0000000080)) 08:51:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0189436, 0x0) 08:51:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x2}) 08:51:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x41015500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1574.033386][T17812] device .881 entered promiscuous mode 08:51:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1574.130133][T17820] device .882 entered promiscuous mode 08:51:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc020660b, 0x0) 08:51:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3}) 08:51:51 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24a80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x41045508, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x2}) 08:51:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc058560f, 0x0) 08:51:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4}) [ 1574.458384][T17835] device .883 entered promiscuous mode 08:51:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3}) 08:51:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x80045503, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x5}) 08:51:51 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0709411, 0x0) [ 1574.616802][T17844] device .884 entered promiscuous mode 08:51:51 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24b80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4}) 08:51:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6}) 08:51:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc08c5336, 0x0) [ 1574.884872][T17858] validate_nla: 13 callbacks suppressed [ 1574.884896][T17858] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1574.919087][T17860] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #131875 08:51:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x5}) [ 1575.009334][T17858] device .885 entered promiscuous mode 08:51:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7}) 08:51:52 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) [ 1575.107946][T17869] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1575.173584][T17869] device .886 entered promiscuous mode 08:51:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6}) 08:51:52 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) 08:51:52 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24c80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x8}) 08:51:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7}) [ 1575.442428][T17885] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:52 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000f7f603000225bdd21a3734df2507000015100000002e0000696c65302e2f66696c65300000df652113911005bc25cf3371490985528a31d304552ea742fdb5a8eb418197dd71fed03e64e1ccef770025bca063a260bbdbf2297978fbc32373e2f87366e5"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x302400, 0x2) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000180)=0x8000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f00000002c0)=""/12) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x8, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000240)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xa}) [ 1575.534829][T17885] device .887 entered promiscuous mode 08:51:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x80045515, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1575.582175][T17893] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1575.661671][T17893] device .888 entered promiscuous mode 08:51:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x10}) 08:51:52 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x8}) 08:51:52 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x80045518, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:53 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24d80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xa}) [ 1575.920708][T17913] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x48}) 08:51:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x90ac3) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x80045519, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1576.011797][T17913] device .889 entered promiscuous mode [ 1576.055944][T17918] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4c}) [ 1576.123407][T17918] device .890 entered promiscuous mode 08:51:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x48}) 08:51:53 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0x80045510, 0x0) 08:51:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8004551a, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:53 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24e80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x60}) 08:51:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4c}) [ 1576.344002][T17935] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:53 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x121201, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4800, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x80085502, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1576.465129][T17935] device .891 entered promiscuous mode 08:51:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x68}) [ 1576.512910][T17949] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1576.593290][T17949] device .892 entered promiscuous mode 08:51:53 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d24f80648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6c}) 08:51:53 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x60}) 08:51:53 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x101100, 0x19a}, 0x18) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000) 08:51:53 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x80085504, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1576.775099][T17962] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1576.839926][T17962] device .893 entered promiscuous mode 08:51:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x3) 08:51:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x68}) 08:51:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x74}) [ 1576.912689][T17974] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8008550e, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1577.010156][T17974] device .894 entered promiscuous mode 08:51:54 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25080648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6c}) 08:51:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7a}) 08:51:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000077, 0x56d241) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x74}) [ 1577.277194][T17992] device .895 entered promiscuous mode 08:51:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8008551d, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:54 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x300}) [ 1577.366189][T17998] device .896 entered promiscuous mode 08:51:54 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25180648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x72b7, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x500}) 08:51:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7a}) 08:51:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x80086301, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1577.646248][T18013] device .897 entered promiscuous mode 08:51:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x600}) 08:51:54 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8010550e, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x300}) 08:51:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x101000, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000e8b71271006925e7b60715b8e5b549fc1337c37bbfe07f16c94d65871b68f2f4475489d909000000000000005472660ef03af1dc991980f19e978962b00df436000138760fec7a2579d038aa389e99e5c2e0cf9b4d60bf2545e065c14e", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f00000001c0)=0x20) openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e20, 0xfffffff7, @remote, 0x9}}, [0xdc31, 0x6, 0x1, 0x4, 0x5, 0xc65, 0x8, 0x2, 0x90, 0x6, 0x10001, 0x9b4, 0x100, 0x0, 0x3]}, &(0x7f00000002c0)=0x100) [ 1577.762396][T18022] device .898 entered promiscuous mode 08:51:55 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25280648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x700}) 08:51:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x500}) 08:51:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x802c550a, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1577.984427][T18035] device .899 entered promiscuous mode [ 1578.045074][T18040] device .900 entered promiscuous mode 08:51:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x600}) 08:51:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xa00}) 08:51:55 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25380648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8038550a, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1f00}) 08:51:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x700}) [ 1578.287359][T18053] device .901 entered promiscuous mode 08:51:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0x8108551b, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1578.341935][T18057] device .902 entered promiscuous mode 08:51:55 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x2020811) 08:51:55 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25480648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:55 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xa00}) 08:51:55 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x2000}) [ 1578.880324][T18070] device .903 entered promiscuous mode 08:51:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0045878, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3f00}) 08:51:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1f00}) 08:51:56 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25580648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:56 executing program 4: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, 0x0) 08:51:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0085504, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4000}) 08:51:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x2000}) 08:51:56 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x1000, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x20000040) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', r4, 0x780, 0x20, 0x9, 0x1ff, {{0x4f, 0x4, 0x3, 0x1c, 0x13c, 0x65, 0x0, 0x3, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp={0x44, 0x10, 0x99, 0x0, 0x3, [0x1, 0x3f6, 0xfffffffa]}, @cipso={0x86, 0x44, 0x1, [{0x1, 0x3, "b7"}, {0x5, 0x5, "32f797"}, {0x5, 0x7, "d1ce5d012e"}, {0x2, 0x10, "c7d61ea0149126573c8cf7df00c2"}, {0x1, 0xb, "04b543862295c9acec"}, {0x1, 0x3, "f1"}, {0x0, 0x11, "ffa15329dacb1e17fb0bf793c4579b"}]}, @cipso={0x86, 0x1b, 0x0, [{0x5, 0xd, "50b650c3f299f85d74693c"}, {0x7, 0x8, "10d388cfed21"}]}, @generic={0x86, 0x12, "8dc2109cbeb120cad19933aa8f1cec26"}, @cipso={0x86, 0x2e, 0x2, [{0x2, 0x12, "7297071c6d6f6d02acfc2796a88a05e5"}, {0x0, 0x12, "bf79e85c9793c175b3c6b42d16d1f4d1"}, {0x6, 0x4, '\"P'}]}, @cipso={0x86, 0x69, 0x1, [{0x0, 0xf, "abddfdffa17753409dda4849a9"}, {0x5, 0xb, "3470c96685ae23f540"}, {0x5, 0xc, "2f0346d58b614457d1f6"}, {0x3, 0xa, "69c62d84fcf1b84d"}, {0x0, 0xd, "bbd66dc42671d936037395"}, {0x2, 0x9, "9dc5a96c520da9"}, {0x0, 0x2}, {0x2, 0x7, "ae5502c42e"}, {0x7, 0x5, "2af98f"}, {0x7, 0xf, "6442a18aebf8c978d0d0cc54fe"}]}, @ssrr={0x89, 0x7, 0xdb, [@multicast1]}, @timestamp={0x44, 0x8, 0x16, 0x0, 0x2, [0x0]}]}}}}}) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r5, 0x80045510, 0x0) [ 1579.235158][T18092] device .904 entered promiscuous mode [ 1579.316277][T18100] device .905 entered promiscuous mode 08:51:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3f00}) 08:51:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4800}) 08:51:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc00c5512, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:56 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25680648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4800}) 08:51:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4c00}) [ 1579.636126][T18117] device .906 entered promiscuous mode 08:51:56 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000fdffffffffffffff060000000000000001feffffffffffff020000000000000000000000000000000000000000000000000000000000000002000000030000007f000000000000000000000000000000ff0100000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfffffff000000000000000000000000000000000000000000000000000000000000000000c7c1eab4d6"]) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:51:56 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4c00}) [ 1579.756581][T18125] device .907 entered promiscuous mode 08:51:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6000}) 08:51:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0105502, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:57 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25780648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6000}) 08:51:57 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x410100, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1580.013159][T18141] validate_nla: 13 callbacks suppressed [ 1580.013185][T18141] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0105512, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6800}) [ 1580.133911][T18141] device .908 entered promiscuous mode 08:51:57 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000000)=0x7) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf253800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099003bdc0000290000000c0058006400000000000000050058004d000000000000800c00580045000000000000000d0058003c000000000000000c00580057000000000000000c0058001500000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x4801) 08:51:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6800}) [ 1580.209085][T18152] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6c00}) 08:51:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185502, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1580.305977][T18152] device .909 entered promiscuous mode 08:51:57 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25880648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6c00}) 08:51:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7400}) 08:51:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185503, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1580.555771][T18167] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7a00}) [ 1580.610519][T18167] device .910 entered promiscuous mode [ 1580.650624][T18175] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7400}) [ 1580.680963][T18175] device .911 entered promiscuous mode 08:51:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185504, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:57 executing program 4: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x51, "d0b6163f664a3b2d61202912792f97fb57de952f8f0bae776b2486b692416f6ace4e6545f2d695f98659ee02d8ef8de8eab7b2bfb7557558e16c47bcef25e54754bb6f3b256b465436986b49e435700f26"}, &(0x7f0000000140)=0x59) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @broadcast}}, 0x5, 0x1, 0x1f, 0x222f, 0x1fb}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={r2, 0x8000, 0x1, [0x6c1d]}, &(0x7f0000000240)=0xa) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={r3, 0x7fffffff}, &(0x7f0000000180)=0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2000000000, 0x101001) ioctl$USBDEVFS_CONTROL(r4, 0x80045510, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) 08:51:58 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25980648c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xff00}) 08:51:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7a00}) [ 1580.916580][T18187] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185505, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3d951}) [ 1581.020045][T18187] device .912 entered promiscuous mode 08:51:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xff00}) [ 1581.084747][T18198] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:51:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3d952}) [ 1581.142700][T18198] device .913 entered promiscuous mode 08:51:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185506, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:58 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a800a8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1000000}) 08:51:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1000000}) [ 1581.344451][T18210] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1581.406942][T18210] device .914 entered promiscuous mode [ 1581.461997][T18217] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1581.502926][T18217] device .915 entered promiscuous mode 08:51:58 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000003c0)={0x1, 0x7}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x45000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x10000}, &(0x7f00000000c0)=0x8) ioctl$USBDEVFS_CONTROL(r1, 0x80045510, 0x0) syslog(0xa, &(0x7f0000000340)=""/1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) arch_prctl$ARCH_GET_CPUID(0x1011) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xfff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x5}, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x4f, 0x1f}, &(0x7f00000001c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x6}}, 0x10) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000380)) 08:51:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185507, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x2000000}) 08:51:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x2000000}) 08:51:58 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80238c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1581.777845][T18229] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1581.781219][T18231] vhci_hcd: invalid port number 0 08:51:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3000000}) [ 1581.835160][T18231] vhci_hcd: invalid port number 0 08:51:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3000000}) 08:51:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185508, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1581.875270][T18229] device .916 entered promiscuous mode 08:51:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = dup3(r0, r0, 0x80000) write$qrtrtun(r1, &(0x7f0000000080)="0dbfd72596c1e244376443e380072879626e7f0449387c315dc77d9f64dee1cc04490b72d7f50100bab29e103888eafe8f9a56f13ba7e7d8864bfb827b38fb7c2d0096096feeed001aa1c3606656fe4cb2dfe1aa86448ec9859296", 0x5b) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) [ 1581.932771][T18236] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1582.012605][T18236] device .917 entered promiscuous mode 08:51:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4000000}) 08:51:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4000000}) 08:51:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185d00, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:59 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80258c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:59 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, r2, 0x604, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x800) 08:51:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x5000000}) 08:51:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x5000000}) [ 1582.288453][T18254] device .918 entered promiscuous mode 08:51:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0189436, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:51:59 executing program 4: ustat(0x5, &(0x7f0000000180)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0x1, &(0x7f0000000280)="9ae97ae98d291264888e444f0d763bfc7794cf75fcd710702b082511465d24e5709a52ede52eb419414de26629078871aa4111929867d8569bea90976bee0aa5f6178a4b6485305a42a128cd2ba34104d2a1bbba79560c044400a4136327f8a65596e82b81b34aec2a4a6b1e38b970311e5a3ea873b8ac2ed15989fa3a65423c550078d7c431af9179e9b48ba74eee9742e96c11ae5d0d05dddcd638652da6", &(0x7f0000000340)=""/98}, 0x20) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x10001, 0x8000101, 0x0, 0x2, 0x1000000000001a8, 0xffffff7f, 0x6c7d, 0xffffff00, 0xffff, 0x8001, 0x9, 0x20000000, 0xab, 0x1, 0x0, 0x10, {0x6ccf, 0xb2}, 0x4c, 0x40}}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000100)={0x6c, 0x5, 0x4, 0x2, 0x1f, 0xfffffffc, 0x0}) fallocate(r3, 0x2a25fe7012bf3b0c, 0x4, 0x0) [ 1582.376116][T18261] device .919 entered promiscuous mode 08:51:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6000000}) 08:51:59 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a802a8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:51:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6000000}) 08:51:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc018ff00, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1582.545330][T18271] vhci_hcd: invalid port number 0 [ 1582.602932][T18271] vhci_hcd: invalid port number 0 08:51:59 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7000000}) 08:51:59 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x28181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xba}, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x200000) ioctl$USBDEVFS_CONTROL(r2, 0x80045510, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@target={'target ', {'PCI:', 'a', ':', '0', ':', 'd', '.', '12'}}, 0x14) [ 1582.661561][T18277] device .920 entered promiscuous mode 08:51:59 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7000000}) [ 1582.728423][T18283] device .921 entered promiscuous mode 08:51:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc020660b, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:00 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a802b8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x8000000}) 08:52:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x8000000}) 08:52:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5000000000000073, 0x68181) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00') ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0cc5616, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:00 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045510, 0x0) 08:52:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xa000000}) 08:52:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xa000000}) [ 1583.101383][T18303] device .922 entered promiscuous mode [ 1583.193570][T18307] device .923 entered promiscuous mode 08:52:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0xa1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:00 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x35, "1cba92ee94c1dcc49616c1822d1182c4d66ef93dfca907f22b9ac6f37d9323e2f0e953ca72a284e8ee909d2cb46196bdec42ec6c6f"}, &(0x7f0000000100)=0x3d) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0x2010, r1, 0xffffffffffffff80) 08:52:00 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a802d8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x10000000}) 08:52:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1f000000}) [ 1583.342340][T18318] usb usb2: usbfs: process 18318 (syz-executor.5) did not claim interface 0 before use 08:52:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x418243) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x5, 0x0, 0x4, 0x0, 0x5, {r2, r3/1000+60000}, {0x4, 0x0, 0x4d, 0x81, 0x3, 0x0, "dd095bf4"}, 0x6, 0x1, @userptr=0xfabd, 0xffffff01, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$NBD_DISCONNECT(r6, 0xab08) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000140)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000004540)='.pending_reads\x00', 0x20000, 0x1c1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r7, 0x110, 0x3) 08:52:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1583.454997][T18324] device .924 entered promiscuous mode 08:52:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1f000000}) 08:52:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x20000000}) [ 1583.551637][T18330] device .925 entered promiscuous mode [ 1583.567350][T18335] vhci_hcd: invalid port number 0 [ 1583.625547][T18338] vhci_hcd: invalid port number 0 08:52:00 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a802e8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:00 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x20000000}) 08:52:00 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)={0x9, &(0x7f0000000080)="ae8ce0c0e6af8ac80080021b63bb93840d9cdba1264da686914b87f3a9375b92c242f622d377f767090cc31b72a5bebc0d769cc3af1edd61a12e46c5209a1f2f9f4e3927f02f25149f24d231ab330253570aa999d74f56d520927fe614532d240c4409125ed15243d5f1a3450c505f4fad6d12a3b7cc908d156816e229ddaee6da81202ede60673f357e58ff19f478d1d3e66ab32241635707e223484a61b3b3c25d09199ed26883dc8b4f77d446041513ccebc68897974011e1c9b3f9509cbd"}) 08:52:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3f000000}) [ 1583.813874][T18344] device .926 entered promiscuous mode 08:52:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x3f000000}) [ 1583.894098][T18352] device .927 entered promiscuous mode 08:52:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) read$midi(0xffffffffffffffff, &(0x7f0000000080)=""/115, 0x73) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) socket$xdp(0x2c, 0x3, 0x0) 08:52:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x48000000}) 08:52:01 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a802f8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0}) 08:52:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x40000000}) 08:52:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x410080, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x2}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1584.145237][T18366] device .928 entered promiscuous mode 08:52:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4c000000}) 08:52:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0}) [ 1584.239926][T18372] device .929 entered promiscuous mode 08:52:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x5) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5c9227ee981dfea6}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x907}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x4000) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:01 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80308c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x48000000}) 08:52:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x60000000}) 08:52:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0}) 08:52:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x4c000000}) [ 1584.528444][T18390] device .930 entered promiscuous mode 08:52:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x68000000}) 08:52:01 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x2, @remote, 'dummy0\x00'}}) r1 = inotify_init() ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000000)={0x0, 0x3, 0x14}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={@private2, 0x57}) 08:52:01 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a803a8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x51d90300}) [ 1584.799472][T18405] device .931 entered promiscuous mode 08:52:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0}) 08:52:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6c000000}) 08:52:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$CHAR_RAW_BSZSET(r2, 0x40081271, &(0x7f0000000080)=0x5) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) [ 1584.873727][T18411] device .932 entered promiscuous mode 08:52:02 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80588c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x52d90300}) 08:52:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0}) [ 1585.094668][T18423] validate_nla: 15 callbacks suppressed [ 1585.094692][T18423] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x74000000}) 08:52:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0x44400) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x60000000}) 08:52:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 1585.216430][T18423] device .933 entered promiscuous mode [ 1585.292723][T18431] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000077, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x80, 0x106) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xf9}, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1585.384009][T18431] device .934 entered promiscuous mode 08:52:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7a000000}) 08:52:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x68000000}) 08:52:02 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a805b8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) 08:52:02 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x68181) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x40, 0x2, 0x52}, {0x7, 0x49, 0x2, 0x6}, {0x5, 0x7f, 0x1f, 0x4}, {0x1, 0x3, 0x5, 0x401}]}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1585.609885][T18450] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x6c000000}) 08:52:02 executing program 2: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64=r0, @ANYBLOB="040000000000000000000000000000003d0400000000000001000007000000000000004000000000000000000000000000000000000000000000000800000000000000000000000000000002000200000000000800000000000000008000000000000000000000000000000000000000b0183ba27c02a1a2ddb8ae"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r0, "01acc2898eb82754888306174589b4acdc8c0275128f4e5c6eda10737dcbe938a644a518c3cb9cf930990e50a3e7c297a0e43890e4f3946ea99df579ab8a2d4ff67d92aa0f71c448c84996d6e90ad99f76c4e99a5e6347942071f6151d98ae1c9859ff52581b3d008fabd3ba74c71e172b697a3e3835710369569221932c05c12ac0e00291fafff75dce67b1951ef25bf247061e168853ee104de5b54e9f08c5321bf1faf053481420d8acf6db13f1d525b60cd3f7eca51f60a34d771535fe4a9622ff06a23db09108c9464c3e503c09f7adb765225b7ca7a220be50568692d31ad22ed0c40e285022b5ac20628b91113b6b1cff932f17b71cd95e85b88c9601", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000080)={{r0, 0x5, 0x8, 0x6, 0x4, 0xfffffffffffffc01, 0x4, 0x53e5863e, 0x6ce2, 0x3, 0x7801b514, 0xfffffffffffffffd, 0x5, 0x6, 0x4}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000700)={r0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004f1c0)={0x0, 0x0, "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", "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"}) r2 = syz_open_dev$char_raw(&(0x7f0000000080)='/dev/raw/raw#\x00', 0x0, 0x880) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64=r5, @ANYBLOB="040000000000000000000000000000003d0400000000000001000007000000000000004000000000000000000000000000000000000000000000000800000000000000000000000000000002000200000000000800000000000000008000000000000000000000000000000000000000b0183ba27c02a1a2ddb8ae"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r5, "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", "3f522bd7de639475f4587fe23b171179869e966adba596356da6aba4730dc25c8208685766007814b0df8b9a5a1c03bfb4e3caef5dcefe493b04a926d8cc4b8207bd53a537c88938ca66f08e1d11287d914b815c2b212212c5fcf2304fb5ff0f67017100b14f894f8c40dd1847ad67f22f257ef073a92e3c35a27dc16ad1c9ded92563cb05deb43ce339614d0d552eaa94daa3311b8e5a2f891d131efd45b2c401e85af50a47294e2eb7a0c6dfdd07da0c19e359b1435824de336f9ffdf5acaf756d764bf7702d67844cfb09c431bc33a594c07f95376e5f2e844a39a9f447b711ad51a7f1a55d01137d1aac55df44af9b9c68691e5c480251988d4562ef2a9726cc94366922dc07d02f2825a13f6d1f0e8a3db815ed5707284f72f34fbbb40c40538a75b8c730b7b2bce86966b863f42d64bf3a748af3037f307cbe94aef6a6554cf283d782ffb0089efefb673bcbe8a8349edbe134266e4a4efb398fcad3b10c4973d6e5af2839574eb09f0ddcb87522f74fce6e8c5ffccd582a15be8c527fb5fac177210cb87fe01c6415624e095ac3cdb9d174a3d32de76e67b1448ae7d9b9069febf96424301894f6b294c12e4c226530ee157b3e3e6cc665bc5e39dd5a322856e4e95d161298a55286ca6770ebe8abde79b44e024efbb151bd338412bec5a094b8dc649e20f54c77a62cf1fb66cd9a013fb73e8a1250b385e0de70d13fa0eee47c8af7093ede6589636a18fbfd8e1272b3970c6f541d052e72bbc43f74c14c3bcfc1df34a445798b7bebfc721a2f9cd03217d886800e384fbc8338e733b93b8d105d2a3713650bc18dfa00caf63a8463aa9fb0e18569943500056ca40b3ad40c7c3f75aa1ac7c9303651a0445a50a2b34e7b7be595df03f224accf393a7d8b4eb6cee6a010db59f28432c24b07637fea1e461f55f3838a423ce1add011171673f19afedb9e94d7fc85c26c0779253b63cb0d1b77e92c0bc4466894d1954e9465e23e9fcbcb7f49dead69c62b0c7fb118ca8d18994cb41567bc58934649104b76e457698ae6885cfe5e12622ea79969d1af463693283d086a74ebdeb5fc4f288f0b87e18cb9caf07965bde54bde58834896bfe21be8724d04875817c8716b045e6924c574f4a0190ef2a478f8e50981cbd1062f3f632990b2357032b384c88043c1d775da9afe28e5a59bc7e782d021a5ac6ca62d89acf350247d2497f1c2cebbcccd7cb8b1b491bad640738bb396788c216a967cd36a39bd7ff106ad84aedb186c16ab339752c86c58dd0fc4669f3dc6c340c2ea2040571787332968a0535502c2a146d05d928285aa77ad957946b6f25426c16d26ec8f118c4f961e14c29811487a3655cf37ddaad223200af38c9e62d46e9d9b9923a95f9d39bc45e00740293ad645977a68192ac90b61ed0917c91deb872b967254ef0e42e8fa3ce8ad3855cb146a66acbd34bbff35192bd8628017a587c51ff98030acd89e9a3f7e06af6831f3d6f4b48dc5d4ceefc802b01c497e13b726146fa5f1d64277b636be859d3aa835a54f34b0a036de266c99811ec9c0fbff62882a4d8308c3166d068871b49e2fa375e40bee3656bb3c79212503348253d93dd0d6b7e303769b80e74cffd1484d009f3bc24cf5b5a87b6421dc217e0d2f459c2c41d0a184f090c4437da12c4d23ee78d6502b02e51187fe1fa325b600a27383cb39f2c8828b171cb9d04e523331c9d0dc34f01cc6632c93f06eb776e78dc45fcb35d2290156a25c5a887edb5531ba0fad77f2152e915f84c3a860f25f70592c391a04ab550c77dc7305208abbb7ea63c92b4a5174d0aef0736124100363e68b5493b7827b239407af7a6dc862554452909e425fde159ec9a7bf301f79f64a8d23a9caf5822c62361212fb932dd57c420d9ccca450e8a4a65dd027574c81dec9cd8d3d1b1522bddb68e8a9aed547dc8c1c521ac7e8c6a9614b5f0cba4a5e11bf5d5758f2bdafd204ea8d2a619ea6184d3271efc6d6a7ee9365f0cecba24e7d3f026453ff2b26db2fe8ea5d653fe5a520372a6ab54620b87847139e47d9b9c91b0182447c2662351eefe172e183ce1e2b3480caac9ec3ffa2cf4f49db739dc846a4466ead9bb76ad9189f4acfe3fd38f7f71efd3f82de6666c2fac5449f96f4a530eecf0a9d61bac82516fe63b500b62a8acc9d8a55cdba0c56b9bc12dee178578ab5ba5bddc466cd0536fa36597e993c5b8b7062549e439efa3b19cf9cd1f3e0ebb448a2fd17d1e4a9afff595a503ce1078bc2f4bf8d8d504029dc197fb50013b4628cdae638e2e08e0b087d2260ec45758bc2f81a4b3be9b4cb69c1535c0dfc859c83c79f8660e9e0520f74ec3d350673eb1c2cc1ad78d4b407d6a97556cd2dbdd862c6084d5e2451eb8e0973d8f3cd74b30589dd519274b006b31d613f472d4a84ae72795c8dbf00b8c73d777c2fae26efb89a3762db5744f316f4345c0bef02ec63ce223a43e6efcf219128743d0309f03c2456171c8bb63a1e57ff289a6439c7c0812f13a3a9e3642712688d0ecaf55cf0b41b245fda6c4acdff05288381637c941f166de974dda40bef43a8b2548c7ad180bf0a58573cbcade1c31dde65712db571b9f6fa9e2679176e0156e0a057deca76335d9c948d0aa15ec9b37c75fc0c371801366a015560b497d06918ca3efeb401aa95295642b31c0ce009ec40d92d0d3d1bae52ea632193cb1797af9e9bc8fc61dc3d5008a81072886a36ca58b03de19e5823e38ae7b09b047ff198dbca897cb2afadf4bcf47843db8a52a1c15bb1ce1bab9b2dfb5d5ab489643dcb647f654b973923bed91e0c72129b893b8c067fe2764a0a67c6e56f54b59b4daa3d60f2b2397611cda9d7be9ac4dfa6b440675cef674a31460475139f5e3ca448d28fa47d06a1e78beabd82ab00cc32a90f4d39d8161751424fbbde2b51cd2454b8022e2933e2150fb9c3267f7f8d0bef569afa286d382ae471f7868b90dffb15d5836f6d37501f5cbd98ebbeb604f6fc118e27e867d8ee26c1ab8b6d575f80de064199978de5bc43c1ba1172927949c1a27ff95a91c611622e8c3de9758b794547cb499061dc5e4d4d267df12f9c0a779b52e36af978ae21fab7a86accd9a617d2e47332a02ce67423b4c4c91ab980054c3d576463eb928e83c7fdf5653b7698174c1da9e966e784e1c6c61c08e6713a5101022ceb1e9a0d9e2c2e815e4fd18faf7823aba424c2df1ccebb18ca0b687a6716c3b8bb87d4351e9466c70e9cd37328f36de6cdb8dca5f70b2930009d84d293563d17f6632fa78ca385bf227dfbe0d0ff06d41079f3a98642d2d35fadd81456a565fc4c6d26fcff88e5b7a8f4ca0ff947d71f7e8554b69aab15dd8bb97a604f9d43f09d4af3c94021c0fe264413c1f16d7fdc048b37c8920c788b727fe3024283d6b9adfacf302066c601b63b2b9e4d1d5079199c1e699eeb391eac9369deb77581bb4957d7fd73c73eebf2867dabcf7a1c5a9d561543af0459063480551c14df1b8b34d697e7c983685c9a84d14a434af2580ff814e8d136e30ad66f28b77144595bc598b9d2e8025a92339f960fd619fd6409286ea2b6af9eb6eb941a2940ec59c204c7074dc7cd69c097bba44345f0927668687b902a97d74152613e94cfdac2889269e6d70352c0b3953e69e852f9a2d5501a2208c59916975bacb888e74fe17c1f1be1b98ef597886ead58167449579f735d3acfd3be23aa974fa80a7756373e69b0cb592cae4b731a30024ceff31b4a9285d6de86c2cdc0cb58ee220e2b4696f356cd87847137c95897d49c0470ac099cc20a88f446e6468ec12a81394846beb2438090602576cafea8a83f6226e2b90c68b494965e85f5f0e9828f3af76283328c7dd7ef3b71b066b45e5c5ead76a871f01958a2dbf6fbd5e44574c93da4841f205b43740e1f59954fb57083bad4bb3723e507f965f3892e3d173162ba83f7ddb84a69595e196b8f92aced0db31ff9eeea3b2b018b97847918c1f1819c55f561faf7fe57288d3d7dc9f955e1ec83abef7aedc79ec96ec8990679baea55268df3ea27c035f31a74e72c3c67010afa85a0e1fafd874a0e6194d728bf2c3801122747935964398631476ac3d1fde43c04f74655c36555de4c119e0296a32d0a11aec12c63810c81f03dc739be2214ff570fe7ff54c95745977731ab2b416a6df977c2be0911d9fd8f3a58d124c81067c54307f91a3b750202837808f8dca6177f03ff32f4b6565dac3903aa74fcb9d3660f6a550fe368c6e43049b6a0df346623a2402039bf68ddac36008393911ab7be203e89f92eae2dccecff2e6ce504761e120e2158ce3750e610ace9e7ac7e14214ef2fcf96db3654dece5aec0cc293f53d086d105af6ae831084b62043c73f564ee76e3c8353b3263aca5816a9a3a474844a94cd5caf85ba1682f164fd3e7b930b6628cdd6fd4aa060902557c545accfe4da82fc2caf10aa61d381b6db0bfae6a7ba2d8bef03c7bd89285fe92abbf6dcf6edd1e58152508738b7a87549046035a2cd0caf1fc97a3dc9cf650200d04911e72f0a08e4a60dfb444cf4720749809e056b19292c8348495dee262487aff4ed1750f6025c987e91d3286c5f8ebf7f0a904dadeb9b6841728052726b99f434fc7bcdcf1d9811b321e7b04e5bb118c3e02e6acc91480a5ae6b6e6182bcdbd8d86902a0ceea1fa5782b74953e9093c7bd8287c7a3b7b7532c41cf933b23df0e0246adcbcaeb34df63cb014b410d6d43d1b043eadf73e1a565bd164ec02b42e0f7148549b958d65495c8b2611504256ff57f6c29b0453bbe828adf8061780956df96e801cbe63c893f3a98b6f063307354bbe989d4314d617584bede299c0905b5106472a130e67d7af8a28cdbdf7e2e6b5d495ba5bc2284eea27a043471a9b6d4f745539100e5160c8b09d85e512b088932006dee28d859c2738b6c8f745876ab3127ea0af7cc4e65cbffa1b3602db7044617cad2c67ba7d3fabc341c6826f5099e6b303d5fc5387555ef3fe648cd9f9a5faebc31bb31c6b2a950273027257e85b5c5a5b6daee7e34e8c33f854bcd429d1c70fcbb0a6022a7fca47d8e1a36aa47c182b9bc590d140066447a0738dcb27511b102dbae53fbc49415b8ec2042d46774f164239edcbe529bbe99e15246f99f17520e42e706032082c7e1cefa099c8d088d8d827e7c8ca49337c8680df71d772d89e5fb3999a1d62c204776bd8c6fc62441bb8f839b35937ed020e36510ff69a386483ad66b19e0279d23f6751ac677af0695316fb57d2557d19153075962e78a59d13101d4901c168e5f55b2acf707d7db302fb819e3ffdfaca6da3f3407e027d300a8fb334727f850fe345f209a8772233523e8eb841b5e744389acae2950356f362239f76915"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001700)=ANY=[@ANYRES64=r5, @ANYBLOB="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"]) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000700)={r5}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000501c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0, r1}, {r5}], 0xe7, "6ce6d6fa3432d4"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000080)={0x13980000, 0x8, 0x7, {0x7, 0x2}, 0x40, 0x9}) 08:52:02 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xff000000}) [ 1585.683728][T18450] device .935 entered promiscuous mode [ 1585.735582][T18455] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1585.839916][T18455] device .936 entered promiscuous mode 08:52:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1007, 0x123181) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x74000000}) 08:52:03 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80638c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xffffff7f}) 08:52:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x17, 0x0, 0x0, 0x0, 0x0}) [ 1586.138233][T18478] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x7a000000}) 08:52:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7852}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)) 08:52:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x18, 0x0, 0x0, 0x0, 0x0}) [ 1586.323658][T18478] device .937 entered promiscuous mode [ 1586.398522][T18491] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4e4, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000000)) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xe4ffffff}) 08:52:03 executing program 2: ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='veth1_vlan\x00', 0x10) [ 1586.484789][T18491] device .938 entered promiscuous mode 08:52:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0}) 08:52:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x2}) 08:52:03 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80688c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) prctl$PR_CAPBSET_DROP(0x18, 0x13) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xfdfdffff}) 08:52:04 executing program 2: io_setup(0x1b, &(0x7f0000000080)=0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = syz_open_dev$binderN(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x800) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x505400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) io_submit(r0, 0x7, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xfbff, r1, &(0x7f00000000c0)="c266ca1b", 0x4, 0x6, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x1, r2, &(0x7f0000000140)="2c2196aa6acb34f0d8678a03a806f41580f4efa43c351d29de0af52f9a329aebb832b2ffe9e48fe916d6d854685ce28bbef049859f3e0a4587bc1f6342ea2f07ab08754dec3abd3e67de04717b921b3e29cd6c2968eed68c9a2fc26f5411308295447a528e9a1a6e9b7ecddde8c891a0e64e4c47a705bdf171ffc31d73fe587ae7dec11bc325b02b4dc4db909a5f13b5d2dff04642d6faf5b442f5c1bd814fa958e1d509e136e66673f367a36a6a03788f8359108446f8dbc3c5af0b490d70a7a18eca47d201b3b485d2e3351d7b87ca998416110892a6495e015d88b4dd18d52c37f7820c5516709d0ea13e7207a246df2e0f8f", 0xf4, 0x1f, 0x0, 0x1, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x92b4, 0xffffffffffffffff, &(0x7f0000000280)="94db617399618f688ad4fcc9226dbc17bbc0e09a4b1d777f425f8661cb4b698cbd2c6af4a1e2925b40e9bd7d0261f65f00b7e1a59cd52e7caf3de0d3ccdf0cfcb1fcf3e3d29651e9ff93db489452c4a8241fe9e5b4f6a90061551ff43b2089dbaff047a76edca6aa0372ebcdbcd569cd5ff764e22a8aeebf02338a19430f2c7728fe15e9e47f547ade4812a3e6a2235ec87a3686b065ac", 0x97, 0x100000003, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0xff31, r5, &(0x7f00000003c0)="a7d85d355ca54302fbd94d8411e957aca043ea18414a3c", 0x17, 0x4d8d, 0x0, 0x6f24e9040bcfb, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x50b, 0xffffffffffffffff, &(0x7f0000000480)="77797d2c6e690bedc54c5176b523d7e667441433a7f0e3677923d2386ef0275d7fc9d027306119f2877c", 0xfffffffffffffe17, 0x6, 0x0, 0x2, r8}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x95f, 0xffffffffffffffff, &(0x7f0000000500)="05164dafe54ed438cf59abde856ac449a84d0adffc03e3935cabbe78c2e66641", 0x20, 0x5, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0xfff8, 0xffffffffffffffff, &(0x7f0000000580)="32eaa24918dcac366ad147d13eee31121827b772b50c506ec79d0dc7f24126162da3cca007926058128b7ce3e0292292479d62a10a84dd085988eea2945368152cc9addf9776111d29bb80fc6cd4571c9c23dffc3bcbb0d067f8b3c0c9735b04dc08733a30a21035dccdceb8f0df72d52f8da9c199437be70455bf29d479888ad8caac9b17238e6785b54b63b6d213ae35d42787dc2921d8067892f390a641d6cb1d981fed21be2598", 0xa9, 0x40, 0x0, 0x3}]) r9 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r9, 0x80045510, &(0x7f0000000000)=0x4) 08:52:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3}) [ 1586.869928][T18513] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1586.914317][T18518] vhci_hcd: invalid port number 0 [ 1586.950334][T18518] vhci_hcd: invalid port number 0 [ 1586.962047][T18513] device .939 entered promiscuous mode [ 1587.016532][T18527] vhci_hcd: invalid port number 0 [ 1587.044944][T18528] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1587.062161][T18531] vhci_hcd: invalid port number 0 08:52:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xff000000}) 08:52:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0}) 08:52:04 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x6440c2) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) 08:52:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4}) [ 1587.194608][T18528] device .940 entered promiscuous mode 08:52:04 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80698c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xfffffdfd}) 08:52:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x15, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0}) 08:52:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x5}) [ 1587.495299][T18546] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:04 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6}) [ 1587.603063][T18546] device .941 entered promiscuous mode 08:52:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xffffff7f}) 08:52:04 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0}) 08:52:04 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x248301) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1587.675712][T18558] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1587.744416][T18558] device .942 entered promiscuous mode 08:52:04 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xffffffe4}) 08:52:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000002c0)={{{0xb}}, 0xb, 0x3, &(0x7f0000000280)="2373cd7354debddab9b867"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000003c0)={0x2, 0x0, "2a85f2609a98033a926cb5ec02d36a833a48888bed58094bf9c6a7633e2b01d332399086160b07a646e0f89a304085a0037062537cb624bca7a4d36f799d685dc6705e2bcc7ecc26901cd78e3c68befa7bd5edea8b7ee7e66c014a04defcf621e31fc7eb2f2dcc912fae2b7b7ab93a0ff298e81e7d707362851edd141c752d1310affb7e8808754f346014183fe959e684929af387c81f9b7302f931dc17e0269d014039aaf7562c19a49903abbddad9e39f63fbcaa43c3b6548d9d750ed0a1e314550f5b25ddbaaff5c93e4fec0193058231eea138cbc3bbdf129306d5e58a584027c3d0063dd2da222b8c2536b4936daf9e8cad9eb8fb65d0f844bd51a6803"}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000008300)='/dev/ashmem\x00', 0x1e6bdbd262ee5636, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000008340)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008480)=[{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000500)="d7de1bc7e0360398230816d1238e2dfb1d6da4697b3604ca6cbda9b26974dcf84ed0840c3e425537a5cdfa9887f3f3c646388565d2acf89f25e961a39a16986af7c51533feaadc3a2026e9adbacb9c1db6c66b7b1a3f20464ad8640271426577c3f483b79c5492bad970ca26d1a77e71c58650ac078b50c4a5ec0b2fd0b26145d8ea2e751cde9c62002da8cb42a87fe678ad19133efb369257b121e5012efffab22a18850296b7c9fdb092f0479ffc40cf02afe184cc74df3035fbf8c61e21d1c53b27ff64a967a0fc2f075af5bb8a0b7bc268876589b99513abc90c51a1c40d78209c605d027295aaf4c40538a9f41d8556", 0xf2}, {&(0x7f0000000240)}, {&(0x7f0000000600)="23110aa6526acb2f2b84088e4c42d6eec10b1442c99e816c5cf7d4a1f7d4b54e217df8707f0714951a90b6929f45a9ffda27703922429a9e4cb49ec0160845d0af2e34bc373e561fb5c7cc7b6d5137127091c96edaa742fc04e57babb23eca3769de2c8c10b7ff2834bcf8d7b62f17e9c1f594a7cef16a4941fbf089e63cb5aa6e17f0696c0674903c034b6e235358f424636c9544336e9861876d368c699d18fec59f5a17845c222e63d7295aae08bc50d6f981f45b3a42e9585dfd00fd260f335a63ee54f099e4f75231", 0xcb}, {&(0x7f0000000300)="576f3d9b3f26b93f176a5288fe8d41d30de747b3a7", 0x15}, {&(0x7f0000000700)="135fae602fa9d280d053163b84a2bfedef6f8641d0dca9886f88e22e4a1e5dd8f784969562bb72b24c4d91e34f5df127950aacf9a92cabb05ec8c19250825b1288e481c7a29929118ad929357a5c6114c351daae6155ba5cd7d5d311a53a03f1be89b4147b449323f710f596696bf0bdc6f6f3aebb39fad40104a989c78616c09919db20ad5be1b5d7ee3f7fb04f", 0x8e}, {&(0x7f00000007c0)="1c95d825730ebbfa83a66ba8fd1cabe9b81ac5072fcc3b745b7868af785d5fccbbc8c2691d1b1bf27edd860607abdd9e655d77bb6be068a3bd3fe8725a25b4a112e89adff2687bf55294b5d96ac359d3fd376d0ffa5193b80080fd803496d2625e6b48ff38fcf4dafd5b49ca10d91b84f05480fe1b6cdd360d14ef7ee9f388748b0cc8746ea509132804372185d1bfe7a1999fc6d37261526d39741f91be5a19c6874577e787e7927d828ddb167b12f95b45", 0xb2}, {&(0x7f0000000340)="d513515bf7c9ec463ee61d04a7", 0xd}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000380)="b2ed6e48b3", 0x5}], 0x9, &(0x7f0000003ac0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}], 0xd8, 0x40000}, {&(0x7f0000003bc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000003c40)="f76b009f39de878feef493d9722d46ecfeb073eca1cc7f6b9c4e97e39d6d17769d3a62c6dc7b5f39ff57ff2b5378fc30e4bc86533589ce3b7f30f85776b7c303a7338899351648cd857ab8b09fd3ff24005b4603b96629b342be6e71525263aae8b711238ae34a4b63a0310ff135b5bc62cd493516a5896a702d1b245cd203f74db81855396c668844f70c53382691c2a0fe92", 0x93}, {&(0x7f0000003d00)="0ea508b6d81ad411255f2cbe15b9daf4afb6cf861424b662b0c46b52d2e3ac3019ef8c1d5dd3c345ecc65ddc1a7ae0657aac1b624665b4c8a3d9dad6bc9ed07ff7ec66a5fe97cb529078ff7c75df97fe0a8e8eaadb5102ecd5610755bd4788980aceb9ed320ea00bc2f52eeaa4840aadf62285059045bc0f31b75af95114ddf6e89269047e3abc0215c1e0ea03691882c0dcb6c1bce73cf0b73ccb5a58d0bab3e1c27baefaee362ebeca686853886d966f6efe574845d13ed2ef4ab9198a92703de8bdd98c6e3c8930270190f908ce01e69344a85541c95e1cd60af812a6dd5b61eb", 0xe2}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="2099e3ddf5d40391e348e9f7054bcd2b73a73b284dba2827472b39847d4748a3ea052c7ed1a166bb1d986c3ff342f5ce03de800eecbcf774feb7088d0e3fa797c50fd86f403d6a63afce6254d9c78b218ea8fd727c31a3474119c47bc0746ab9a30c9997e6147e04e5b6b19a46fb7fd088bf3522d839fe285826bfc17b68db0a5d67189c08d365b1d5db4fdc120c4c29f6a723cb97c81552e870908751e2823c5444d6933c41c776ad1b08e62bc622f58f109f0d9bc92462c7fd55890d4d86105c816d6a8be7e6740593ec3be5f1964054e5dc770987a881dce23bcb87c019f7d579aa", 0xe3}], 0x4, &(0x7f0000007200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0xc8, 0x40}, {&(0x7f0000007300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007640)=[{&(0x7f0000007380)="04b78782f7d73e7a364bf623f5957d0e38fb44b480a64aa5d2d5a3b889279cd87b762d535cc55f0e9932b6a93712041e56d5eeda3b496078494ca8ab12a66ebba39a5817cf4b41575570615e2bae7619947e13b25cd6f8f5fd776a60e2839fecd32c4504f2adbdecc596f51d58087899615e3ea060d1e7b833437d6994172bb092f0f72a68ad7c0655ae62a128fcb7014a35446e2182f79c420653f885746779cfdcd5c9856b869d128a6b5d3e69232ac036629d99cf30e9d992f920a85df7a6de2dd6ca86c20a1524fc57e6c54fb6cea2159a04cdcbca26c99c3c7ca8cff8f9415291c9c88315e1ef42fbee14b1f22c477decb7bb0c", 0xf6}, {&(0x7f0000007480)="e6afd73080279cfd911e08543831b238c0c89bcdfbc050b53e51dde414237d34b835f4fa4cafd1c533bc79ef4addece01cca17a8c1fd75c85a135104632526afc96971b51c55b10d0966dcdacd4c55b2b74c7938ce31ff4929c0dbc50fd1f3bb9c6214f02399c6f070b2b9ee41b0bae47670977adb042c26ddb85830f079094f4f3bf079398749e6", 0x88}, {&(0x7f0000007540)="2e7a40971b07643c07f1b60dff2819b305cef1ef78aff05a8dc23c80b38826efe99a4e1b695836e75925ac3aae637bf84cfc4566e97385a028fe355f7e1d206fbe4839fd8ac223d8bf8ef70bc3c9e1dd8095d0a683388185775647322475010e2eab57196226cf14065be32b13ffb98cad11cda3e193e40be23cf2f9561fc7f85a3bfeb9bdce6567ca2c1f88f048eb31673cefb15f226db3e2efcc1290d0671ce146252ae3fa0cf6b43ac0ff761c7bc2c1c9b4b1bc36b9d7aed907f31af3bec5cc32aaa0049ed2aafcab07e8da73e26371550725f6f7c96e4e84c536b7d0acb7b2048a073fb2c058aa", 0xe9}], 0x3, 0x0, 0x0, 0x4008810}, {&(0x7f0000007680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007740)=[{&(0x7f0000007700)="f873037d58", 0x5}], 0x1, &(0x7f00000078c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x58, 0x20000000}, {&(0x7f0000007940)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000007e40)=[{&(0x7f00000079c0)="04544bdfd9e147cdfbff9e53bf1f42a9cdcc46a39095c21f901f5e021b6545e87dce00", 0x23}, {&(0x7f0000007a00)="58f6b28ed12a225d7b68a494cc058f9ebe30220c5a869f97950d0fd24e", 0x1d}, {&(0x7f0000007a40)="81531fe9ba43085878f499e3af5fa73afda019a1bcb61dc5bcbb2db73bb3a41505996b967ba974f847e1f08dc0900f85928fac8e78076c152be89274387908287093dedfa336c2019e58ec7b840aabdc7daead8da05a709405e4638f8f70fba801f669eda4e49b9848ada6885c6c", 0x6e}, {&(0x7f0000007ac0)="04022c442fdcf1596b9fa3317b6658ce9ed42f61b66ae6e31e4ef69f583ad9c0850c16a3545e24b2bc20bb01fcce3a4c54ec6210399ee40ddd76548df6532cf44ffea6ed4bb756a1d36adabb136b4a2a80453d8e57d6bf51fd49fa3cc5e0f82cd222223066a56e917e6bf5ec23e09cad47bbcc1b569e7b78d307411c35a878938c2f921fe84b3cc0b51b8c6ac4ac53", 0x8f}, {&(0x7f0000007b80)="d250c5ef3d6e76ebe0e4e3c4b8651b50e3d1cd4e1a072d2f8f034492642fd05ee3c8e9d6b7ae57cdf7e1d0d242fcf63660968743553960f5881426c09a16ec5dee7c37cdac9d092f5dbc1fe56ddfecf718ec18994e515109a49ad0d91d085004d3203f21aabde2b091a68fe28c209661157a306bac56fa57548449bb0a99422bc54dc6e10238650b25dc70d74fec34a7136bd4318ad71cdb04f8ed36eed3541f47a3a6b9abd0eed127291aa4e50493b68b51bc90b134be5f48de99", 0xbb}, {&(0x7f0000007c40)="1f", 0x1}, {&(0x7f0000007c80)="c4d9094ef9be3ba967789c1effc885cfdc8072e790001884ff995441dec72b9e8325e98378034e7b2ea67c26cfb2ea72fed3091948e910d7c1be04df6958860c4ce4d7bf2d", 0x45}, {&(0x7f0000007d00)="c8d0400443ddccaabb29a26172ca36c0bec50c86601bef3791ec91c3d4f9753393da5483c0f0bde6e44e1c9f2c26cd448aee2a39ae85088bb8e4bfbddef4c18da4c47fcb39f8b7751bcf63baaddc7da4bf8d66c0fed6b15bf4701242ea34b804410ad7be22f2c1893d04dd66eb9aec444ba5e7258b2cddbfef28b38d468717e593cf4d9a45d0a4cdbadb0debcbd9439fe49948e3ca144a4a2dd6d0e3c397600fa4cab49c81e2bfa1133bbf8f", 0xac}, {&(0x7f0000007dc0)="9724c3a6db6e805a6fed54d95edb47bbb5f42a5bc3034c663922b63374ee9cefb610bf473bf32f2a3c3ac264913686a071bfd85ad94df56b80fca7d8a6a334044b4a68f3d11332c32310e2e0e78f9d77062beeb253dd1045d1c3a385aa2908b752", 0x61}], 0x9, &(0x7f0000008380)=ANY=[@ANYBLOB="000000df4ae55195ae491e0100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="100000000000000001000000010000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x40000}], 0x5, 0x4000004) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x80, 0x69b0, &(0x7f0000000080)="15df37c17339e34365ed4a4ce91eebbd34e59356f5e51875fee03ee3790d4816324bb880b33eecccf86ebd81f0ea47b7c6465ac0bac223676c8f779bb453871a2868e38365bd11e45aff2c67a823f3a6798e755fbc8890a98d1bac9c4dd5cd444ad84fd1ab875a461200f8ee06b6638be18a74e758e2fd671b053d534de01be7bb3c0a979725ba88c159e934a05f236ab33480c9d83cbcc8129d86b27002ff5022fdf510660fbfa44d806f379c514f10305ed309aca5fd16d1ab0beb31660cd89e183e0c722319dc86272038d550d235aff8ccda31b2aba3d7ba3441790d06e9caa253433c7f9e0c7088ac5a220b62848a99d431ac249d"}) 08:52:05 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a806c8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7}) 08:52:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x5, 0x0, 0x0, 0x0}) 08:52:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000080)=0x1) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1587.917405][T18571] vhci_hcd: invalid port number 0 [ 1587.959855][T18571] vhci_hcd: invalid port number 0 08:52:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x8}) [ 1587.992753][T18571] vhci_hcd: invalid port number 0 08:52:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x361786, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCDISCONN(r1, 0x7439) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000080)={0xffffffffffffff6d, "9e08f9e7a0562560d7090edc6895937aba6d2d53b7d04e8fd0a38b853955277fe267bc5f40264af616a2839df35428ab1e10f119a3a6c60b0fa495050614fe7de6f373a9b66a4770b59091658fbee3d909404c9717799d2ff0a37e91b4ea5851902e14412bc1553cf61f0ebabf81899289a0c8721459fc2d983ec3d9e43c0415c11e6fe24fc951ec31995bc7d8ffcc5788fa50e0f793251eea04581a8bb0ef51fe8b1988149ad9baa500000000000001012d980277ee7b9dd9a59c0746dd46d3a6c404801d1183bb217ee3655a4418e3f2af00d83004fe06f139600e7a7c81"}) 08:52:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0}) [ 1588.047982][T18571] vhci_hcd: invalid port number 0 [ 1588.053692][T18578] device .943 entered promiscuous mode [ 1588.086563][T18571] vhci_hcd: invalid port number 0 [ 1588.129607][T18571] vhci_hcd: invalid port number 0 08:52:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xa}) [ 1588.174875][T18571] vhci_hcd: invalid port number 0 [ 1588.189245][T18588] device .944 entered promiscuous mode [ 1588.199981][T18592] vhci_hcd: invalid port number 0 [ 1588.210556][T18596] vhci_hcd: invalid port number 0 08:52:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x2}) [ 1588.236070][T18571] vhci_hcd: invalid port number 0 [ 1588.242128][T18592] vhci_hcd: invalid port number 0 08:52:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000338e, 0x2e40) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80882, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d0a, &(0x7f0000000100)=0x47) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000000)) 08:52:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:05 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a806e8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x48}) 08:52:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0}) [ 1588.452242][T18604] device .945 entered promiscuous mode 08:52:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3}) [ 1588.543382][T18614] device .946 entered promiscuous mode 08:52:05 executing program 2: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000080)={'lo\x00'}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:05 executing program 4: poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x3046}], 0x1, 0x40) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4c}) 08:52:05 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a806f8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:05 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x8, 0x0, 0x0, 0x0}) 08:52:05 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4}) 08:52:05 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = dup3(r0, r0, 0x80000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r1, 0x1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept(r2, 0x0, &(0x7f0000000100)) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x7, 0xb, 0x8, 0x7, 0x2, 0x0, 0x6, 0xcf, 0x40, 0x221, 0x0, 0x4, 0x38, 0x1, 0x101, 0x4e, 0xfff}, [{0x6, 0x0, 0x50f, 0x2, 0x6, 0x3, 0x0, 0x8}, {0x10000006, 0x602b, 0x9, 0x1, 0xd140, 0x6, 0x1, 0x8}], "eabf98d9e663192e6a225768f14796fd93e357fad4197e1c9a9a77b4ea22d1d01a68e0984280869227b9c406a1811ae1abef879a30d5981edb9f8cdec0f32ed262d9b1df8a4f89296df319039223ebc340ef61ffbcabdb84afc25de51a90502caabf55ef7e4e18784f8af7798b1a983935884d96c7d57bc0143c16a08f157075ded9a29dc74a172edaa86853dddad77fafaede54d23d5752a62f310e7ba1f50279", [[], [], [], [], [], [], []]}, 0x851) r5 = dup(r3) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000a00)={0x9, 0xd1a, 0xc, 0xfffffffb, 0x998, 0x8001, 0xfffffffd, 0x7fffffff}, 0x20) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000100)) 08:52:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x60}) [ 1588.842432][T18633] device .947 entered promiscuous mode 08:52:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x5}) 08:52:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x10, 0x0, 0x0, 0x0}) [ 1588.932043][T18642] device .948 entered promiscuous mode [ 1588.944172][T18643] vhci_hcd: invalid port number 0 08:52:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x20, 0x1, 0xc5f5, 0x3, 0x2d, 0x40, &(0x7f0000000000)="4a22cc3667eb474845404a6120cb9a6bd31255c94d30fc03754c36914d3980e1f54aa11c53a241c24bdd4811e6"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000000c0)) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) readahead(r2, 0x0, 0x7) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000100), 0x4) [ 1589.002455][T18643] vhci_hcd: invalid port number 0 08:52:06 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80708c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) readahead(r4, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r8 = getpgid(0x0) ioprio_set$pid(0x1, r8, 0x2007) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8800}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000100)={0x7, '\x00', {}, 0xff00}) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0x8, 0x7fb, [], &(0x7f0000000080)=0x81}) 08:52:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x68}) 08:52:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x300, 0x0, 0x0, 0x0}) 08:52:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6}) 08:52:06 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xb40b, 0x68181) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x40) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{0x5, 0x40, 0x3f, 0x7}, {0x4, 0x1, 0x80, 0x7f}, {0x8000, 0x55, 0x3f, 0x9}, {0x7, 0xfd, 0x5, 0x2}, {0xed21, 0x81, 0x7, 0x4}, {0x7, 0x40, 0x9, 0x3}, {0x40, 0x78, 0xff, 0x10000}, {0x8, 0x3f, 0x7, 0x3}, {0x592, 0x1, 0x7, 0x81}, {0x5, 0x40, 0x9, 0x2}]}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x0, 0x9, 0xffffffff}, {{}, 0x11, 0x8, 0x2}, {{r1, r2/1000+10000}, 0x4, 0x2, 0x3}, {{}, 0x0, 0xffc0, 0x434}, {{r3, r4/1000+60000}, 0x12, 0x4, 0x2}, {{}, 0x12, 0x7ff, 0x80000000}, {{0x77359400}, 0x15, 0x1000, 0x1ff}], 0xa8) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1589.271422][T18662] vhci_hcd: invalid port number 0 [ 1589.290803][T18659] device .949 entered promiscuous mode 08:52:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6c}) 08:52:06 executing program 2: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1589.396643][T18669] device .950 entered promiscuous mode 08:52:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x500, 0x0, 0x0, 0x0}) 08:52:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7}) 08:52:06 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80738c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40001) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:06 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x74}) 08:52:06 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 08:52:06 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x600, 0x0, 0x0, 0x0}) [ 1589.711925][T18691] device .951 entered promiscuous mode 08:52:06 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x8}) 08:52:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffff, 0xa802) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1589.830275][T18696] device .952 entered promiscuous mode 08:52:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7a}) 08:52:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map, 0xffffffffffffffff, 0xa}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=@dellink={0x354, 0x11, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x32}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x200}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfffffffc}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x401}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}, @IFLA_VFINFO_LIST={0x2c4, 0x16, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000000, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x80000000, 0x7ff, 0xf17}}, @IFLA_VF_VLAN={0x10, 0x2, {0x30, 0x3dd, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x3d9b}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x1, 0x6}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x494, 0x3f6b7a04, 0x8100}}, {0x14, 0x1, {0x100, 0x760, 0x7fff, 0x88a8}}, {0x14, 0x1, {0x1, 0x13f, 0x3, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffff0001}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3f, 0x80000001}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10000, 0x1}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7a, 0x3a6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffffe, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xf6d}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x80000000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0xfffffe00}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5, 0xd2, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6686, 0x6a4, 0x80000000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7fff, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x8, @multicast}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x460c, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffeffff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x235, 0x80000001}}]}, {0xd4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0xda6, 0x6, 0x8100}}, {0x14, 0x1, {0x5, 0x9e9, 0x6, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x4}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x913, 0x4, 0x88a8}}, {0x14, 0x1, {0x0, 0x390, 0x4, 0x8100}}, {0x14, 0x1, {0x4, 0xe60, 0x2, 0x8100}}, {0x14, 0x1, {0xfffffff7, 0xa66, 0x0, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x7, 0x15f5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x7, @link_local}}]}]}, @IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bridge\x00'}, @IFLA_PHYS_PORT_ID={0xe, 0x22, "5b888bde19c2d33e522d"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xe570}]}, 0x354}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) 08:52:07 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80758c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x700, 0x0, 0x0, 0x0}) 08:52:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xa}) 08:52:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x1801, 0x42) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, 0x3, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4ce2}, @NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf4}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x200}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x37}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x486}, @NFACCT_PKTS={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1590.098859][T18717] validate_nla: 10 callbacks suppressed [ 1590.098885][T18717] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x300}) 08:52:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0xff00, 0x0, 0x0, 0x0}) 08:52:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x10}) [ 1590.209645][T18717] device .953 entered promiscuous mode 08:52:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x20007ff, 0x2602) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1590.287583][T18725] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) [ 1590.359209][T18725] device .954 entered promiscuous mode 08:52:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x500}) 08:52:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x48}) 08:52:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:07 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80788c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:07 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)=0x4) sendto$isdn(0xffffffffffffffff, &(0x7f00000000c0)={0x2b0b, 0x5, "da26f969311bd95bf2647695105a4eb35e457d27e51c3526638922594c6230ce2339e50a4b11a13513f7148936336b67d361ce4edde2875050d6a0db174ba2b5f4"}, 0x49, 0x4008040, 0x0, 0x0) 08:52:07 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x600}) 08:52:07 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0}) [ 1590.661860][T18752] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:07 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4c}) 08:52:07 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x1a402) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1590.774105][T18752] device .955 entered promiscuous mode 08:52:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x6) [ 1590.831820][T18764] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x700}) 08:52:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0}) 08:52:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x60}) 08:52:08 executing program 4: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000180)=0x1) r3 = dup(r1) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}], 0x20) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) getpgid(0x0) [ 1590.896626][T18764] device .956 entered promiscuous mode 08:52:08 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a807a8c63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) setgroups(0x3, &(0x7f0000000080)=[0x0, 0xee00, 0xee00]) r1 = signalfd(r0, &(0x7f00000000c0)={[0xa758]}, 0x8) ioctl$SNDRV_PCM_IOCTL_RESUME(r1, 0x4147, 0x0) 08:52:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x68}) 08:52:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x68181) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xa00}) 08:52:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0}) [ 1591.213762][T18783] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1591.303734][T18783] device .957 entered promiscuous mode 08:52:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x100000002, 0x502) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100)={0x23, 0x67, 0x0, 0xff}, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000240)={0x9, &(0x7f0000000180)="d0688cb789af8277d84251a7dd68cfe59e3100c132992798be23bab356ef92d4b5ec50886a97db68e3b1448c05dfa63598216168b32fd1e5370d593a2958e18bef9023ffb567dce244c0411a7b8e4c308ec7f970d224e120e8ea20382b5401520293c20efd2e0956d1da91a77c0ae94cc03e044ae79ecd916fa2a770c7a7a2eda3dc50e603159cda4a00bf2545ef6ff38417b02a92366258b7601b9009"}) [ 1591.354719][T18797] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6c}) 08:52:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x1f00}) [ 1591.433565][T18797] device .958 entered promiscuous mode 08:52:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x5, 0x0, 0x0}) [ 1591.481769][T18803] vhci_hcd: invalid port number 0 08:52:08 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20500, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x125080, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000100)={{r0}, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000080)={0x7, 0x0, 0x5, 0x4}) [ 1591.539050][T18805] vhci_hcd: invalid port number 0 08:52:08 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80640863940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:08 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x8080) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0x6, 0x4) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x2000}) 08:52:08 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x74}) 08:52:08 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x2c381) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2c8241, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="6764670fb261dd660f3882aa0018360f07ba4000b063ee0f01c5660f388274050f01590e0f20450f0f0c0c66b8002000000f23d80f21f86635c00000500f23f8", 0x40}], 0x1, 0x8, &(0x7f0000000140)=[@cr0={0x0, 0x10010}], 0x1) [ 1591.713665][T18815] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:08 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0}) [ 1591.811510][T18815] device .959 entered promiscuous mode 08:52:09 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80c80, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000000c0)={0x1, 0x3}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x4) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) 08:52:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f00}) [ 1591.875922][T18828] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7a}) 08:52:09 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc000000000000075, 0x80200) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0}) [ 1591.969688][T18828] device .960 entered promiscuous mode 08:52:09 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = getpgid(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000100)={{0x9, 0x1, 0x10001, 0x8001, 'syz0\x00', 0x9}, 0x0, 0x10, 0x80000000, r1, 0x8, 0xffffffe0, 'syz0\x00', &(0x7f0000000080)=['/dev/bus/usb/00#/00#\x00', '\'&^\x00', '/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00', '/}\x00', '/dev/bus/usb/00#/00#\x00', '\x00'], 0x71, [], [0x9, 0x7f, 0x4d, 0x81]}) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x4d34c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f00000005c0)={0x0, 0x0, [], @raw_data=[0x80000001, 0xdc6e, 0x5, 0x3d, 0xfffffffc, 0x7, 0x4, 0x27cd, 0x6, 0x544, 0x4baf, 0x5cd, 0x7, 0x3ff, 0x449e, 0x4, 0x6, 0x200, 0x3, 0x7, 0xb6, 0xc0b, 0x2, 0xfffffff9, 0x3, 0x80000001, 0xff, 0x8, 0x27a6, 0x9, 0x101, 0x5]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x400, 0x1000, 0x1, 0x5, 0x9e}, &(0x7f0000000500)=0x98) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$BLKRRPART(r9, 0x125f, 0x0) pselect6(0x40, &(0x7f00000002c0)={0xea, 0x200, 0x1f, 0x6, 0x9, 0x9, 0x40, 0xfff}, &(0x7f0000000300)={0x7ff, 0x4, 0x400080000000000, 0xffff, 0x80000000, 0x3, 0x2, 0x10000}, &(0x7f0000000340)={0x7fffffff, 0xfffffffffffffff8, 0x40, 0x3, 0x9, 0x7, 0x812d, 0x435fffffffffffc}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000580)={&(0x7f00000003c0)={[0xfffffffffffffdf4]}, 0x8}) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000000)=0x4) 08:52:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648b63940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4800}) 08:52:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x300}) 08:52:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TCSBRKP(r3, 0x5425, 0x200) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0x80045510, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) 08:52:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0}) [ 1592.254185][T18850] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x28081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x400440, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$setopts(0x4200, r2, 0x51, 0x5) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x10, 0x0, [0x8, 0xfffffffc, 0x3, 0x8, 0xea, 0x1, 0x497a, 0xff, 0x6, 0x800, 0x6, 0xff38, 0x7, 0x1000, 0x7, 0x4]}, {0x4, 0x0, [0x5, 0x9, 0x7f, 0xfff, 0x6, 0x2f, 0xa0, 0x4, 0x2, 0xffffffff, 0x588f, 0x9, 0x4, 0x3, 0x9, 0xffffff0f]}, {0xe, 0x0, [0x1, 0x8, 0x8, 0xffffff00, 0xffffff81, 0x9, 0x4, 0x1000, 0x0, 0xd0000000, 0x3, 0x0, 0x1, 0x50, 0x2, 0x8b5]}, {0x4, 0x0, [0x8, 0x0, 0xff, 0x7f, 0x3, 0x0, 0xda, 0x8, 0x6752, 0x5, 0x1b0d, 0x2, 0x3, 0x10001, 0x1, 0x1]}], 0xffffffffffffffff, 0x1, 0x1, 0x120}}, 0x20) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0xd4eb, 0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) sendfile(r4, r5, &(0x7f00000022c0)=0x100, 0x1) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x5, 0xa0580) 08:52:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4c00}) [ 1592.354104][T18850] device .961 entered promiscuous mode 08:52:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x500}) [ 1592.455469][T18862] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1592.503524][T18866] vhci_hcd: invalid port number 0 08:52:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x10, 0x0, 0x0}) 08:52:09 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6000}) [ 1592.560181][T18862] device .962 entered promiscuous mode [ 1592.574522][T18866] vhci_hcd: invalid port number 0 [ 1592.610741][T18872] vhci_hcd: invalid port number 0 08:52:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x600}) 08:52:09 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x300, 0x0, 0x0}) 08:52:09 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c0a940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:09 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000240)) r3 = dup(r1) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f00000001c0)={0x0, 0x40}) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x0, 0x17, 0x21, 0x0, 0x2d, 0x301f, 0x0}) flistxattr(r4, &(0x7f0000000080)=""/216, 0xd8) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000200)=0x3ff) 08:52:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6800}) [ 1592.823474][T18886] vhci_hcd: invalid port number 0 [ 1592.867674][T18883] device .963 entered promiscuous mode [ 1592.884750][T18886] vhci_hcd: invalid port number 0 08:52:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x700}) 08:52:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x500, 0x0, 0x0}) 08:52:10 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0xee01, 0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000001580)={{}, {0x1, 0x5}, [{0x2, 0x5}, {0x2, 0x5, 0xee00}], {0x4, 0x2}, [{0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x0, 0xee01}, {0x8, 0x2, r4}, {0x8, 0x2, 0xee00}], {0x10, 0x6}, {0x20, 0x4}}, 0x6c, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r6 = geteuid() fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x0, r6}]}, 0x2c, 0x2) getgroups(0x7, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee01, 0xee01, 0xee00, 0x0]) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESDEC=r9, @ANYBLOB="050008000000000001000000000000005abe0000000000000300000800000000000000000000007f000000000000000800000000000000040000000000000000100000000000000002000000000000e3fd0000fffbffff060000000020000009000040003100000000000000", @ANYRESDEC=r5, @ANYRES16, @ANYBLOB="02000000060000000000000003000000000000000000000000000000000000000104000004000000000000000300000000000000010000000000000003000000000000000200000005000000030000000000000017070000000000000600000000000000fcffffffffffffff0200000000000000ec0700000000000000000000ffffff7f020000000010000002000000", @ANYBLOB="eefd53f8cfd1f793f75720bf989a57ff177c8bd6dcb3ff0fa8dd13cd66f5a87335f6c7614f6538ecb58dc2a13bae67d5c64232f3ad7a0a187f79c9a30daee00d2e11de44eb104112e108ea4649f1d8dc3635ce", @ANYRES32=0x0, @ANYBLOB="fdffffff0200000000000000030000000000000000000200000000000100000200010000900000000000000006000000000000000200000000000000010000000000000000000000000000000300000001000000020000000000000008000000000000000400000000000000fcffffffffffffff0500000000000000060000000000000003000000bfdb00000000010000a000002f070000", @ANYRES32=r10, @ANYRES32=r7, @ANYBLOB="7f000000020000000000000006000000000000000180400000000000030000000500000023262d000000000000000000000080000000000000000000000000000000e20f00000008000004000000000000000600000000000000640e000000000000070000000000000007000000000000000800000000000000ff010000690c0000ff7f000000c0000002000000", @ANYRESHEX=r8, @ANYRES32=r4, @ANYBLOB="e0ffffff00080000000000000200000000000000ff7f0000000000000600000080000000285d21407d73000000000000000000000300000000000000fffbffffffffffff0700000000000000090000000200000001000000000000000200000000000000ff0100000000000038bd0000000000000600000000000000080000000000000001000000400000002f00000000a0000065000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000000000000000000000060000000000000008000000000000000100000001000000280000000000000002000000000000001b0000000000000008000000000000000800000000000000050000000700000002000000000000000200000000000000050000000000000000000000000000001fb52778040244f9510000000000000007000000ff010000520000000060000001000100", @ANYBLOB="09000000050000000000000006000000000000000000000000000000030000000900000023242f000000000005000000000000000300000000000000020000000000000088cc201a0000000005000000000000000400000000000000050000000000000002000000000000002e0f000000000000b1000000000000000001000000000000b4924b0e07000000090000000040000000100000", @ANYBLOB="423a2a85f1a3dfe28480ec77ac4eb260faa0bf829cf3572304b3bbdce19e", @ANYRESDEC, @ANYRESHEX=r1, @ANYRES32=r6, @ANYRES32, @ANYBLOB="41050000090000000000000004000000000000000800000000000000000000000000000005000000000000000300000000000000010000000000000003000000000000000300000002000000060000000000000008000000000000003f00000000000000c4000000000000000900000000000000080000000000000000800000f8ffffff020000000060000001000080", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="080000000600000000000000810000000000000001000000000000000000000000080000"], 0x598) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000100)={{0x2, r0, r2, 0x0, r4, 0x46, 0x1}, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5}) r11 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r11, 0x80045510, 0x0) 08:52:10 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c23940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6c00}) 08:52:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)) ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x7f) socket(0x1d, 0x2, 0x1) prctl$PR_GET_SECUREBITS(0x1b) [ 1593.096387][T18900] vhci_hcd: invalid port number 0 08:52:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x600, 0x0, 0x0}) [ 1593.120413][T18900] vhci_hcd: invalid port number 0 [ 1593.137765][T18900] vhci_hcd: invalid port number 0 08:52:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xa00}) [ 1593.173405][T18900] vhci_hcd: invalid port number 0 [ 1593.187920][T18905] vhci_hcd: invalid port number 0 [ 1593.196346][T18904] device .964 entered promiscuous mode [ 1593.210622][T18900] vhci_hcd: invalid port number 0 08:52:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000080)={{r0}, "6bc11f783620dc8bba4706a56f434af5d7218807394607259a69b9cc5364cdf12a458d01fab29bf5fe3b43a6136d36011f612af72b9bb838e0f60b2bf67b42d50d75819e3d6d8cbbf75390f14f6f767c65594fd0b99a327ae456a14e2fcff9b0f6c2a12f7593247632f9e0d2ed77f2f4676d7b2814b22ba11f8f8947c7c7569cb2b42f34b9c781e3523e442e7256a222efac5a28e0b4e7739068ef8ed093566c4ba279b41e1f026d50e046345921b2fe33d6f3862859b60b505fc113b51121ca9a14f57e7b967cf225d634d375e5baf26b64e057667ab7610bf63b7f65436fc0da278324692a21be329f12476f3be8d6f5e5588f6718a87c6a968ae93e279f8503a3c3077b157ad63d1ccaf0c03ad9490764be259c998d6c59924233b6b7a321298facec540f03311a162e0dc11dfb6416613ad0498734d8f45f8147f6b537570334db51e94285f1f3b0fc59f06cc9edca500163030c9a6f8af0e96266cb14c8fe4935adf392e4c36fd92278c10ab8368fef94246902bf6acbfb797f4e37edec58f61e3eff622bf47cf1dc386f2612026cb62120acbce5640a252494987ae223fb6ae257e348caacd257698878e5507123cb624d2291519ef90c48576c00fc06da99959390b62c4c37fa2c8fd8604e7091ea6229d299549869fdebe59aa76dcc958d7cd7e9340cc60aced8b6ec820725c5ff87659ae2cd0f068e1875512c3598c0e554204aa38afc703f0e40b674aa00d9a5bfd7a90ac7eff5f31f1642648d194e334ea2fedff655ac399cae349ee040bb6dc1079a15e4d7847e0e243580cd24f5854ec3739d074857c5fc1d600cbb4b66fc70de2995a423b80d079019869f35aee9c83783e09755b6919558a6b0c1ecea87516ff3fbb87e2c28a676dc8ffce37c1df18ed705f8bea50ea18ced85380d4d82ee4adab79b0ceb871dd3b3b1fb2077ee555e8d3977dcb89b1673040ff7477c4a3a9bf216c2af0374a5995771964633c4fad8e047078398dadf36ce5ff5637456c1a945bc584cdbc142f4572efc0124c01f1cf1547ca6d6ad2b5d3b3dc95d79f0b65c8cd1a79c2efa5da94a43ef52c83fb3a5849d501df04dc37297042a696eb46c7d7900aeda5b3152c452d83f4414ce233a6e25fdecc529c794fbfd57f97e2f8bb41db641014ce7b901f2a35fba673f922b31bbd3167797c57e5f1d57c20a4d14b6dc1b1a71dfe2af3a440091beee2a04ecf3a46be14083fec7caf3d0a7996d0e65d1114cf1e7f9c44b104ad1ea7b9774a57ef72cd2955a356893d8f41244b7ed3a150cdded1d2756984224dd3b4229d4d88c5fa98ebce7e00e3f7d9fc6707852586a27a802cda1fe7d3f19d8f591b2f72d2ed6da328926ec67a410a82636c7e964dba0b1d27e11592e6dbc4b4d5a9294c00c71b0d43eb8f9b11b6a3069b745e1cbd8d7b987cbfb42c4d71e60c4c75b489aa4567d7af39882d58f9ab4121e2a8cd536d53c492a39a42f72930a04020447fd34a54ce5d588c12a24a148d02e77f8f6d4c2be66e9b00e623c69c9ed86fa0674e9297c4cd0249ea584fac925b9eea52c0dfecbdaa48f0c17aa95b518a85f6e5f5966188ab1ee2365afef006b63ae01aef6ba9361d55f99412c580d1fdae8100d45c766f92b83a7f9eaf08b8d583d9e0ebb62ceb051a37f6be861fdea98937b61d81d5435b21a45b6a5fe6f4338b307fd6e3083619cc478fa95dfb24eb039b0d638027c5f9362faa42d0105c37de222eb29e655075a2f9cc9f7a0f325432756c169d35f57e1209e47b3a6c998d049dc6e77a87e9c5c5b8cad63178aa8570da46e0450b37123e16f47d3ce66dd0e01f73bb1670681ee9931da4725e1e8d718036d1c3d59d4240970738f67f77e5ac3ad8db98cf228a6177c185921a26d914d93ea4a51689514150e49a005c642dd3d57924590c6ab462dcde9e8734d91646d9329ca5d1cbc276702a31bd4fe24cc15dce75f084174bc04b3753dee33153987e96fd4f4a7598a9df4943e84518c4e659c2dc387c9b2e1e5859a9d4aabf2cdea68d0ca8f7845471622de8840240738ac4a577df28f341762558ab736bc5e6d3d9ffba2da12c3e59a8c42ee65864cbbbe9f81e785f4645958ae0aefffeb815af188a0e255b9ea62909730a2ebb238dc31626ccd47c07d7e37b9e16b91e20cc2a42169ce20373b833c6acb2a02ddfa21aa650f96ad528012225eae60acc4f790052f25118b998fa8db01d5eaf04b18b0c17cde0dce10d8e67e38de2fdab55111ef83baff6a6030e1a0c997828a8a5ab273196cc104d8339056d9e56800ca8d9e26d8fbe9c30bb944c9025d839d866bbcf142caff06a747f6cc97743625d900281313108daced16fc7d2fd81785bf628c317dbd31925b910a99ff30fe0871d88655da865740d399d7808a0994666f64e1721776ce96691dd5542ecc733d58cd66a60ba4be957d40223bc70479b8a2200c6eeb96b6353be7227edbb99afb846134cccbe4494d7f1fe7015199fa7a8d44bef9004303b0060a8ee1fc80919fd54acb57923a89227c7397c3ee5fdfdbd41abfc9a2909a5182d3fffc37ffabdd508d33d1809e12130de6e30dc68caf666f41dab2f1580c6693f4be44a4f876dd158f3f0682e6b16c25f1f984c5eb84f873859bee5dfb627d06bc8c6d4d2cae0c32e26757e11ebc7475fc15ff9eacb4ceded88f95618963ef45fa5376a34a8265855e83bf5e5f0758dacc50663f26dc2da433c3d6a1cc9d7fd4942e789689f9baf251b0201cc80e99276fa618e39f36c44a4f15dde820171deb19c6a569737de1f7d4d2759be1d4eb529185d7f84aa1726224e2438d6bacff093a45d5b005f3adcddba8f5debf8a5d8fc58416131a3dec87d3c7d1f98f6c120061046c9beee3a66c5a2e26c9cad27cf64e21b0c084c0b6a60ef716af102d185694d5ec4ea6969c3a41585fc4446aac14676e8b3e2565312a0c4cd25367240677663e9217b58c9be7ca336352d3aec550f585567546e32815f1c1a2734f2d72e9a429b266317d6605352abd582c1b99b88af9f639782e8c07538dcd6678cc0ef5881e74aeff5979c56edebebb7315fd7fedd5544c8d3ace7d351f009e6c2e1730c14a89456e01927fb6224790a037fdb0b634f71019138415a5c4c98cddcde7cdb7c67ffe4ba00051e975eed9d1e422d72fe3c902ed11044cb4c5153f9be77c32495e1c4c2e6f7a728a38f5541b179a1605b874adc88bb20f5a0d26b31051e5ee995f84471122aec40e28a15750cf3fabd8e18f762f54520b4ecc469d98613c99cba3507c34c219830db403ba6da5ab5978cf9df0c75e38bd47b043f57a7aa59336e54a45d921ea935fd818b79cb5a4255f688f2c122f19dfa5c333a65684b5d0ded781d707e6b972e14954dcfc71aae581671811450c5181c4fecc4df27d9e6db78631f6e4567f193b250d6c788bd9f4d996e5015e65c8bba020cf17c8daa8f13e327a4cc26b4f5ebd3ca1e650d9530929460f75c96774171ba48042f31e3dba3c248224be2646677cfda6e7485242e3e3b7642cb3197ed9e07ed7773dc12a1c2aa5861385529762d074247547f3c24883b09d43285c14ad3660dac2f19aec2e447e4ffea6827e04bf7a29eec2a9795595b242247dd56cfddaec10c16e6ebb59727d4b02f3114c27ddc468277183b4ce1ea39b9a1ea6243e6551426e666daee69e4d80a2e4742c13653d8f0380d8096b184df96482c5a9bd5a30d2a723aeb60529cb037e0fb89c740ecc8cfe79d27a03f18f970698bd8dc76af8f8640a15c73ebb6db6bea8e14793d923c311b79e9105db43c5565b16808b650d7874917f0240336cad9b8df94c92ee0373a3c68e2b9e7794a8c130ea81401f5faff014c2c3f733dcac40f2306caa42d8fcac5e8dd6c8b4335dfb534a2d9af44a641eb35747cb02576563852cdfecb89f3a4b8d3a4017f27ff1144d53cfcd81d01291a35f2483920cf50c44badccad07df17af9ef4ba2633c8e68112b9724c9880706bba977311b15b08dc47e265673c8c6e2a69145ea3c3b803814f85d01ecf203040fedb6fd2c3befca0a9819ae775ba55d850083b49e13fb482d978486218bf09f5566c6a3ca9c950a863089b7e5fb882377635a8ee6b94233d262c3eb41556a245fb66c46a7410ccbc8b1409a7c6db26509b66f400e585d7d1ce09f8e441c193e8b5c32c8eb26889e7845a9df647dc5152a35a461a8c298c0cba7d9f25622aac9277b5e0a76f96cafa7ea5d6389743cac62bea7445f4ceef14d43b131a80f25ef2afcfa8e4ee5294251d26468bf01b7ddaa8d4c2161e758c3c94ee77f0d88b70225362c7f4a6cccb37f9cb28c0923b7626af6694ec9a181be73b8d2f76f51c0e59837aa87c6e5614d8e589214216f704f58fe8d5ae8804263a6435807d44a4003a3d0ad7090c34f068aab5a2d7511674bf7d23539adca7e18271e464f0f511e97f8712ec833ee11a2cbac9b43014a7ab249cebb5c550cc013e0f32e64a3f5bdf69132bccd0c31bc35441f89a1afa97cdba813848ae942dc2a72ecefa6ecbedb18d3b89c0e8d8ffb42f248f304cbd320991695c84a16e48a0b64210304103625e9c3e03ace2dac40a879671be8bfe220249ca27f50990dff046d34b1c75b82d846c229fd63b1150a96d394d78a556c20dd8ebb02d6d2143c8559d15eca763876485cadcd7f8d0f82e6bd16e1d583802b7d9051d4a314f22efc9e00ddd1ebb913cb242dee9c2b76e274eee06315d06cfe1e726f005eba24e1b497bbf3875f858e23a7a0ca8fb14ee3c78f852f10a60f95cd3de4e8a0ef82d79d595a78dbfe88a20aaa1c56c846a2d6c2d303e916cd01cc188743149205c15623cd63d064cc0851355cc0ffd671059984920749a12c69d86488d61df8088d6ad02da2207693b3ad8cc95e10b1c5d90ce6c28b9b6602921c6119566d3b2189d828d976cf1590bc7275ffdd3892e7abef113cedd9e80098599c4c1e6f21876fe0130a3c535c3d2a0780da08e82692a5d9c7b5aecf2d350de8e2fc31690cbb0f93277773231ba76eaaac3ac184edfc5bb2b5cb03b1c3483b4da07d000f764226cf4d8d970837f72d4a53f9ef5c4b9c80a2d5e6fc6467452865768acc724de819682fb7a0110c24f55b281b6cfe4e44e4673287fc24b389166238b0f3c22c760a12ad1677053d995d12bb036963320dbb36573a0ce782feb6ea0c01136b1f69c8614a7ba6fb58688ee6655031cbdb78660ee57c6077f1d43c58aa34e91ae857b36940c8ea0e1eec6c6d7b343546aebc5893f57b88d09687fafea55efe98be7b44f1340408dbabb7202914d3481fa029332ba3d574bad05f0a6ebb44ba398d9ea7bfcf056a527ddebe8feacf09eb7b5343a5253394dd0206ba05b0935f92d1696ed04bb4a454bbec1026bb9a993ff79bb65185706b78eeefc707c041020b9ad2866616d6ce07c1f96d251181b8cf3c2383ce49b5a980c81a1851e6f5793ff5589c840f0998c4bfe91e6e27a088302363f3b03bc48f2a667845d3eae41d43d0638169c004e6c69aebff5ebfe57e73503bf9f0d0c3f84c88bdc5dba20dd80d77253bb8d55817ddd33b12810f3aefb096964c3c502bdebbcbc566ac58d4508f85ff591ba6a16fe8d6776260ff4bfe79cc373b7bf8c6f7fbb52d813aaa601cd6363093f5ed4ff464cf1e2a05a8c2b4c7df615107c537ee1fa8ac8339b058e7da24628057f906a5d987d9b140cb7c4491ab93382c51d74e0b7ee7b62217c1ec01f409bd14d3c8530b71b6b446ce0ea41058aa"}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001080)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000010c0), &(0x7f0000001100)=0x30) [ 1593.290968][T18912] device .965 entered promiscuous mode 08:52:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7400}) 08:52:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) pipe(&(0x7f0000000080)) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_crypto(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@upd={0xe0, 0x12, 0x200, 0x70bd27, 0x25dfdbfc, {{'ctr-aes-neon\x00'}, [], [], 0x2000, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) 08:52:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x700, 0x0, 0x0}) 08:52:10 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c25940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1593.442651][T18922] vhci_hcd: invalid port number 0 08:52:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x1f00}) [ 1593.498392][T18922] vhci_hcd: default hub control req: 0300 v0000 i0000 l0 08:52:10 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xac}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5d}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x91) 08:52:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7a00}) 08:52:10 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000001c0)={0x3f}, 0x1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000100)={@loopback, @initdev, @loopback}, &(0x7f0000000180)=0xc) [ 1593.613435][T18933] device .966 entered promiscuous mode 08:52:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0xff00, 0x0, 0x0}) 08:52:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x2000}) [ 1593.715214][T18938] device .967 entered promiscuous mode 08:52:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xff00}) 08:52:11 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c2a940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:11 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x301400, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000000)=0x4) 08:52:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1d) 08:52:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f00}) 08:52:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x1000000}) 08:52:11 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x18a1, 0x7, 0xffffffff, 0x2}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x4) 08:52:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0}) [ 1594.051263][T18960] device .968 entered promiscuous mode 08:52:11 executing program 4: ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080)) r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x428380) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1594.139088][T18969] device .969 entered promiscuous mode 08:52:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4000}) 08:52:11 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c2b940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x2000000}) 08:52:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0xe8181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000001080)={0xffff, 0x0, 0x2}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x11, 0x6, 0x2, 0x1000, 0x8, &(0x7f0000000080)="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"}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x3, 0x0}) 08:52:11 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x68181) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x860, 0x384, 0x190, 0xf0, 0x2, 0xffff, 0x1, 0x1, {0x7, 0x2}, {0x7, 0xfffffffc, 0x1}, {0x6, 0x3}, {0x5, 0xfff}, 0x0, 0x0, 0x6, 0x3d7, 0x0, 0x8001, 0x6, 0x0, 0x1000, 0x8cd, 0x8, 0x800, 0x0, 0x100, 0x1, 0x4}) r1 = signalfd4(r0, &(0x7f0000000140)={[0x6ab1]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a57b111}]}, 0x34}}, 0x8040) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4800}) [ 1594.463227][T18988] device .970 entered promiscuous mode [ 1594.473363][T18995] vhci_hcd: invalid port number 0 08:52:11 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3000000}) [ 1594.513669][T18995] vhci_hcd: default hub control req: 0011 v0006 i0002 l4096 08:52:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x4, 0x0}) [ 1594.569205][T19003] vhci_hcd: invalid port number 0 [ 1594.609212][T19006] vhci_hcd: default hub control req: 0011 v0006 i0002 l4096 [ 1594.615893][T18999] device .971 entered promiscuous mode 08:52:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4c00}) 08:52:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='.\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000000)=0x4) 08:52:11 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c2d940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 08:52:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6000}) 08:52:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x40000004) 08:52:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0}) 08:52:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4000000}) 08:52:12 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) [ 1594.952024][T19021] device .972 entered promiscuous mode 08:52:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0xe8181) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xfff, 0x10000, 0x4}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000080)={0x1000000, 0xffff}) 08:52:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6800}) 08:52:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x5000000}) 08:52:12 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c2e940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x6, 0x0}) [ 1595.158071][T19036] vhci_hcd: invalid port number 0 08:52:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000000180)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x1fc}, 0x1c, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000000)=0x4) [ 1595.217254][T19042] vhci_hcd: invalid port number 0 [ 1595.236954][T19041] validate_nla: 10 callbacks suppressed [ 1595.236979][T19041] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6c00}) 08:52:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6000000}) 08:52:12 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x1f, 0x1, 0x4, 0x8, 0x5, {}, {0x2, 0xc, 0x4, 0x6, 0x7, 0x7f, "01e11dfb"}, 0x1, 0x3, @offset, 0xbfb5, 0x0, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000140)) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x80040, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 1595.347307][T19041] device .973 entered promiscuous mode 08:52:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x7, 0x0}) [ 1595.412296][T19053] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1595.477341][T19053] device .974 entered promiscuous mode 08:52:12 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xffffffffffffff33) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1595.524411][T19063] vhci_hcd: invalid port number 0 08:52:12 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7000000}) 08:52:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7400}) 08:52:12 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c30940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1595.612572][T19065] vhci_hcd: invalid port number 0 08:52:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x8, 0x0}) 08:52:12 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x60181) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x80, 0x8, 0x88, 0x6}, {0x81, 0x1f, 0x4, 0x630}, {0x80, 0x9, 0x8, 0x1f}, {0x8, 0x21, 0xe9, 0x9}]}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x3, 0x6, 0x2018, 0x1, 0xc, 0x7, 0xfa5120b1fb36042f, 0x1}}) [ 1595.772206][T19075] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7a00}) 08:52:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x8000000}) 08:52:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x1) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX], &(0x7f0000000100)=0xc6) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000280)={r5, 0x8, 0x3, 0x3, 0x3, 0x4}, &(0x7f00000002c0)=0x14) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x6, 0x6}]}, 0xc, 0x3) 08:52:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x10, 0x0}) [ 1595.872435][T19075] device .975 entered promiscuous mode [ 1595.944190][T19084] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0xfffffffc) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x80000000, 0x2608c0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="eba1b6d57ff31482b543e64ddabaf3000000", @ANYRES16=r4, @ANYRESOCT], 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x42000) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040014}, 0x20000000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r6, 0x80045510, 0x0) [ 1596.043028][T19084] device .976 entered promiscuous mode 08:52:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xff00}) 08:52:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xa000000}) 08:52:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000000c0)={{0x40, 0x40}, 'port1\x00', 0x40, 0x100400, 0x200, 0x0, 0x101, 0x9, 0x5, 0x0, 0x1, 0x7f}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x2) 08:52:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x300, 0x0}) 08:52:13 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c58940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r2 = gettid() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) ptrace(0x10, r2) tgkill(r1, r2, 0x28) 08:52:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3d951}) 08:52:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x1f000000}) 08:52:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaaaa86dd6009001100300400fe8000000000000000000000000000bbff020000000000000000000000000001080000000000000000"], 0x0) setpriority(0x2, r1, 0x2) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1596.397013][T19110] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x4621e3) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) write(r0, &(0x7f0000000080)="64080bd15e7acecfd5fd7944680fe3040a85817724e4a90d4c664c0ef3e8e09b5c4cdeffb892666d615120f5da73f7363d650264ae1bc362c51d05db1cecdf791fb9a3ed6c13f5003ba4b32c640b7f0da13d0dfb5d813c59b914c2385249ee4cf29f0a7de23035355676ff163fe6d660a50fa4b08286e65508d24358ab8db12376872ee46533da2c68dd3b71b1ceca4d441d5279059ba070156262797a3cc42548a980383497f24b14d5d410e2c48cc1e97fc802b461421bfbd342ddfa4a40b026755b23082dda7bf6dd19ce698cc2fc79acf946b3565a9d93f0633aaf1e44df68836553f18811abfd64415d816267a9ca13c9e66b91d2402954caeb93", 0xfd) 08:52:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x500, 0x0}) 08:52:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3d952}) [ 1596.512765][T19110] device .977 entered promiscuous mode 08:52:13 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x20000000}) [ 1596.565634][T19122] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:13 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x101000, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x2, 0x2, 0xfd133d34625b8dc9, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x85) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1596.657353][T19122] device .978 entered promiscuous mode 08:52:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x1}) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x600, 0x0}) 08:52:13 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c64940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x1000000}) 08:52:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f000000}) 08:52:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1596.921533][T19149] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x2000000}) 08:52:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x700, 0x0}) 08:52:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x48000000}) [ 1597.044482][T19149] device .979 entered promiscuous mode [ 1597.132400][T19156] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4c000000}) 08:52:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0xff00, 0x0}) [ 1597.238108][T19156] device .980 entered promiscuous mode 08:52:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e4ccb8", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7fffffff, 0x100) 08:52:14 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_ifreq(r3, 0x8929, &(0x7f0000000200)={'dummy0\x00', @ifru_ivalue}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x17, r1, 0x4, 0x70bd2e, 0x25dfdc01, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xc8c8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) accept$inet6(0xffffffffffffffff, &(0x7f0000002480)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000024c0)=0x1c) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000001580)={{}, {0x1, 0x5}, [{0x2, 0x5}, {0x2, 0x5, 0xee00}], {0x4, 0x2}, [{0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x0, 0xee01}, {0x8, 0x2, r5}, {0x8, 0x2, 0xee00}], {0x10, 0x6}, {0x20, 0x4}}, 0x6c, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) r7 = geteuid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x0, r7}]}, 0x2c, 0x2) getgroups(0x7, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee01, 0xee01, 0xee00, 0x0]) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="98050000f5ffffff", @ANYRES64=0x0, @ANYBLOB="050000000000000001000000000000005abe0000000000000300000000000000c80000000800000000000000000000007f000000000000000800000000000000040000000000000000100000000000000002000000000000e3fd0000fffbffff060000000020000009000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="02000000060000000000000003000000000000000000000000000000000000000104000004000000000000000300000000000000010000000000000003000000000000000200000005000000030000000000000017070000000000000600000000000000fcffffffffffffff0200000000000000ec0700000000000000000000ffffff7f020000000010000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffff0200000000000000030000000000000000000000000000000100000000010000900000000000000006000000000000000200000000000000010000000000000000000000000000000300000001000000020000000000000008000000000000000400000000000000fcffffffffffffff0500000000000000060000000000000003000000bfdb00000000010000a000002f070000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000020000000000000006000000000000000180000000000000030000000500000023262d00000000000600000000000000030000000000000080000000000000000000000000000000e20f00000008000004000000000000000600000000000000640e000000000000070000000000000007000000000000000800000000000000ff010000690c0000ff7f000000c0000002000000", @ANYRES32=0xee00, @ANYRES32=r5, @ANYBLOB="e0ffffff00080000000000000200000000000000ff7f0000000000000600000080000000285d21407d73000000000000000000000300000000000000fffbffffffffffff0700000000000000090000000200000001000000000000000200000000000000ff0100000000000038bd0000000000000600000000000000080000000000000001000000400000002f00000000a0000065000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000000000000000000000060000000000000008000000000000000100000001000000280000000000000002000000000000001b0000000000000008000000000000000800000000000000050000000700000002000000000000000200000000000000050000000000000000000000000000001fb52778040244f9510000000000000007000000ff010000520000000060000001000100", @ANYBLOB="09000000050000000000000006000000000000000000000000000000030000000900000023242f000000000005000000000000000300000000000000020000000000000088cc201a0000000005000000000000000400000000000000050000000000000002000000000000002e0f000000000000b1000000000000000001000000000000b4924b0e07000000090000000040000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="41050000090000000000000004000000000000000800000000000000000000000000000005000000000000000300000000000000010000000000000003000000000000000300000002000000060000000000000008000000000000003f00000000000000c4000000000000000900000000000000080000000000000000800000f8ffffff020000000060000001000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000600000000000000810000000000000001000000000000000000000000080000"], 0x598) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usbip_server_init(0x5) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000002580)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="04000d000000000008000400", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="10000400000000002000040000000000"], 0x4c, 0x2) 08:52:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3000000}) 08:52:14 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c69940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1597.407754][T19167] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1597.414487][T19167] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) 08:52:14 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x2]}, 0x8, 0x80800) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x94, 0x2, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @multicast1}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x80) 08:52:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x60000000}) [ 1597.516869][T19180] vhci_hcd: connection closed [ 1597.517110][T19366] vhci_hcd: stop threads [ 1597.536007][T19179] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1597.561377][T19366] vhci_hcd: release socket 08:52:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x100000, 0x0}) 08:52:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4000000}) [ 1597.619639][T19179] device .981 entered promiscuous mode [ 1597.635414][T19366] vhci_hcd: disconnect device 08:52:14 executing program 4: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x47) socketpair(0xf, 0x800, 0xabac, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1597.669455][T19187] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:14 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x68000000}) [ 1597.749132][T19187] device .982 entered promiscuous mode 08:52:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x5000000}) 08:52:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x1000000, 0x0}) 08:52:15 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c6c940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1597.925089][T19203] device .983 entered promiscuous mode [ 1597.983238][T19208] device .984 entered promiscuous mode [ 1598.032940][T19176] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 1598.039548][T19176] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) 08:52:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000080)={0x23f6321b, 0x6, 0x21, 0x5, 0x7, 0xffff}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000100)={0x6, 0x4, 0x61, 0x0, 0x1, 0x80, 0x7, 0x6, 0x0, 0x64, 0xe0, 0x6, 0x0, 0x3, 0x5, 0xa6, 0x77, 0x1, 0xc8, [], 0xaa, 0x4ed}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x22, &(0x7f0000000500)=0x0) io_submit(r5, 0x2, &(0x7f0000001940)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x18}, 0x0]) io_destroy(r5) io_submit(r5, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0xdebd, r3, &(0x7f0000000180)="3b64b95406062c6523bbe663f7065f46b02b97b7a442f962447f6a8e1656530d86de23a7dfbb06b488a431e9cfd56b5186406bf2de", 0x35, 0x5, 0x0, 0x0, r2}]) 08:52:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6c000000}) 08:52:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) write(r0, &(0x7f0000000080)="0a77aa1f78999db9fa97b3f9304e63fa20c8e07433b185c4f79ede656eaf6b283247d669e6e5a12981ca5ccf307530d61fa47eda393f758d4187c33bd98f4b1cbfbd684c207c4b91ae02ab5d8e6333946a686e52a9513e3f58a620171b99a355b0f3ed562d2fa5e867895a695ce6a9560945369854db6bd7630a47bd60671164ca5b3828125d7c717d4681a66002af6d9cb0bcc1c74da83d8f6938d00903be13b2c6364a034bfc0fde0d8b843a604f2663212239fa394fd45cb627acf6f0885417abc9a790", 0xc5) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6000000}) 08:52:15 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c6f940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x2000000, 0x0}) [ 1598.077392][T19213] vhci_hcd: connection closed [ 1598.079428][T19366] vhci_hcd: stop threads [ 1598.099209][T19366] vhci_hcd: release socket [ 1598.106621][T19366] vhci_hcd: disconnect device [ 1598.237717][T19221] device .985 entered promiscuous mode 08:52:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7000000}) 08:52:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x3000000, 0x0}) 08:52:15 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x74000000}) 08:52:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4200000000000072, 0x68181) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = memfd_create(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0) signalfd(r1, &(0x7f00000000c0)={[0xffffffffffff77f4]}, 0x8) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) [ 1598.333739][T19230] device .986 entered promiscuous mode 08:52:15 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c70940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:15 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x2f, 0x8, 0x2, 0x2, 0x0, [@ipv4={[], [], @private=0xa010100}, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x31}, @mcast2]}, 0x48) [ 1598.600481][T19248] device .987 entered promiscuous mode [ 1598.651421][T19253] device .988 entered promiscuous mode 08:52:16 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x169181) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000004c0)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x18001, 0xacd9250336e9485b) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10040, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r3, r4, 0x24}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f0000000100)=0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x68181) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000180)="4cceca884489cebd2acf7e324a3e73dcfcfb79ae", 0x14}, {&(0x7f00000001c0)="3862c89f49526fa5dec6a5589ff3e7f50d952ac523900f4deea98378fb1250a0c1c07163035319d43dca5a8cd9879d72eeb76d54faa47b4ac306ef34ad72ab00f55e4ce562c1303cb9e2f6ef387c13585f580442249e2c015a3f8d4ca33f58cbe969014e707232d902a815d66576b2b02a932d0db77be7e9b189290c7b809686857c3c29c3f297c9eecb852d0ea0f4b1080660e6705443e33c26aeaddce07c08a87a7551ac0ce8f04740ae12362a2aeaf325d0201219f83fd48d85262f55", 0xbe}, {&(0x7f0000000280)="9c5deec73c3aea0fcf2aef9b79a6c6111c446910781ba7e4e0d43ffc8335cc13df4335d347eb880a923336afdbddfd1c24b6e8a38e2d0e4da6e0104da96c59", 0x3f}, {&(0x7f00000002c0)="dbff88bb4d02e1a958f1ccb7e6843e50dad1cfa5e2efefcf37b81b6ef0a5b9d1b670ea5867bb1e4de6a6dc1e893b33d5298cd0b8b1b31f173e93c57247818e9ef5478acf9d06f1161dc206ad16da4bb9bf74a1694584bf2f7718e5cc5257493c9db96c4f2ff0e5f322c34499d0ecc93533d0ab5521b735825e6bfe7f9c7821bbd92e72fb98dc", 0x86}, {&(0x7f0000000380)="8116d25a9d93e5486168ecee3f61cab70e775ba74c6af6c35709d6b2be281c5a5577630d6190d5d873333748c44622387052da164a90abe2e9a262501f2eb6d5624f0bbf536d8e21f38b5f7aab57615a8f1f2ac36834e49c248fb141bc4fd222a4bcf4eb6268601f4a0a8e4a227cdb0e19ff32217d49c3f7d5144e1d330f0c73f2c74ec01004e91cd4722992", 0x8c}], 0x5) 08:52:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x4000000, 0x0}) 08:52:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x8000000}) 08:52:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7a000000}) 08:52:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0xe8103) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x3, 0x10000, 0x75ffb29b, 0xfffff000, 0x6}, 0x14) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:16 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c73940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1599.201681][T19262] device .989 entered promiscuous mode 08:52:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xa000000}) [ 1599.243354][T19271] vhci_hcd: invalid port number 0 08:52:16 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x72a81, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x0, r2, 0x1}) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r3, 0x80045510, 0x0) 08:52:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x5000000, 0x0}) 08:52:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xff000000}) [ 1599.293680][T19271] vhci_hcd: invalid port number 0 [ 1599.326017][T19272] device .990 entered promiscuous mode [ 1599.360372][T19275] vhci_hcd: invalid port number 0 [ 1599.391277][T19271] vhci_hcd: invalid port number 0 08:52:16 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c75940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:16 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xae8, 0xc7a81) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/69) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2a}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x4000081) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x8000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x0, 0x100000000, 0x10000}}, 0x30) 08:52:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x10000000}) 08:52:16 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x6000000, 0x0}) 08:52:16 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xffffff7f}) [ 1599.661608][T19289] device .991 entered promiscuous mode 08:52:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x1f000000}) [ 1599.752814][T19302] device .992 entered promiscuous mode 08:52:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x7000000, 0x0}) 08:52:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0xac2f, 0x9}, @window={0x3, 0xfea3}, @sack_perm, @window={0x3, 0x9, 0x2}, @sack_perm, @mss, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x9}], 0x9) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 08:52:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1f8, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/dev/bus/usb/00#/00#\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5860}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '{-{,\'!-:@\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2a5b}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$.[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '}#&+#/-#:.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0xd0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "cd57ac29dd89f0325b5ed42796b077a4fef91120b8b7f8c5cbe2fc55e0e8b33e40b83d19e063415e2bc14e64933e2da36dbda2d8812b19968ef02fefa62925bc40d8a52ba2b270ec2419184f23ed323ec3e3767d445bb659fdc70ed7674277112498bf55e33c00cb78ddf11044baa0888d7e1285863c281f20395ef691f8de601b72b638c36551ef3d69d74e7c6bd7b2c3569abaa8e4597bc65e6e168a8ab790ec89ced65aaebfefc730a9627e05641f8675918dab700c0faff068885ab38fc4aa04"}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4040005}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000072, 0x8d80) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000000)=0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x2}, 0x4) 08:52:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = dup(0xffffffffffffffff) clone(0x80002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0xe79}) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r5 = gettid() ptrace(0x10, r5) sched_setscheduler(r5, 0x0, &(0x7f0000000000)=0x5e2) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000080)) 08:52:17 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c78940d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0)=0x20, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x235200, 0x160) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000080)={0x9, 0x7ff, [0x4, 0x2, 0xb11d, 0x1fb, 0x9], 0x5}) 08:52:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x20000000}) 08:52:17 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f00000000c0)=0x4) 08:52:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x8000000, 0x0}) [ 1600.142176][T19322] device .993 entered promiscuous mode [ 1600.218764][T19332] vhci_hcd: invalid port number 0 [ 1600.248071][T19331] device .994 entered promiscuous mode 08:52:17 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x179181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) 08:52:17 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63080d0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x3f000000}) 08:52:17 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x3, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1]}}) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000001080)=@usbdevfs_driver={0x0, 0x10000, &(0x7f0000000080)="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"}) 08:52:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0xfdfdffff, 0x0}) 08:52:17 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x80000001, 0x4, 0x1007, 0x8, 0x4, 0x3, 0x1, 0x6}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f0000002300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x4e) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r4, &(0x7f00000022c0)={0x18, 0x0, r5, {0x6a}}, 0x18) r6 = dup(r2) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002340)=0x14) openat2(r6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x50040, 0x4, 0x1}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x4e742) socketpair(0x1d, 0x800, 0x7ff, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$SO_COOKIE(r9, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$USBDEVFS_CONTROL(r7, 0x80045510, 0x0) [ 1600.551091][T19346] validate_nla: 12 callbacks suppressed [ 1600.551116][T19346] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1600.698491][T19346] device .995 entered promiscuous mode [ 1600.749972][T19355] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1600.820753][T19355] device .996 entered promiscuous mode 08:52:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0xff000000, 0x0}) 08:52:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x40000000}) 08:52:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$notify(r1, 0x402, 0x80000024) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x3ff}, 0x4) 08:52:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x5) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xca4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb6b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9008}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4858}, 0x0) 08:52:18 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c6394090135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$UI_DEV_CREATE(r1, 0x5501) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'team0\x00', {0x2}, 0x8000}) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x2e8903) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x200, 0x0) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r10}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) r11 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self\x00', 0x8000, 0x0) tee(r5, r11, 0x1ff, 0x8) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000080)) [ 1601.066768][T19373] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x48000000}) 08:52:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x2, 0x102) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000100)={{0x3d, 0x4}, 'port1\x00', 0xc2, 0x50060, 0x1, 0x9, 0x3, 0x3f, 0xdf7, 0x0, 0x2, 0x8}) open$dir(&(0x7f0000000080)='./file0\x00', 0x400002, 0x45) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0xfffffdfd, 0x0}) [ 1601.137143][T19373] device .997 entered promiscuous mode 08:52:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, r4, 0xd3f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r4, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004}, 0x20080090) [ 1601.228119][T19389] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:18 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x48) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)) [ 1601.314270][T19389] device .998 entered promiscuous mode 08:52:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x4c000000}) 08:52:18 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x200100) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:18 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940a0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0xc, 0x2, 0x2, 0x0, 0x0, 0x0}) 08:52:18 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r5, 0x80045510, 0x0) [ 1601.580393][T19412] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1601.619982][T19416] vhci_hcd: invalid port number 0 [ 1601.644401][T19417] vhci_hcd: invalid port number 0 08:52:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='macsec0\x00'}) r2 = dup(r0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getpeername$unix(r2, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000080)) 08:52:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x51d90300}) 08:52:18 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x40, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4010000000000073, 0x601c3) read$usbfs(r1, &(0x7f0000000080)=""/253, 0xfd) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x4) [ 1601.672287][T19412] device .999 entered promiscuous mode [ 1601.681619][T19417] vhci_hcd: invalid port number 0 [ 1601.704905][T19417] vhci_hcd: invalid port number 0 [ 1601.710432][T19420] vhci_hcd: invalid port number 0 [ 1601.735665][T19421] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1601.749135][T19417] vhci_hcd: invalid port number 0 [ 1601.783055][T19417] vhci_hcd: invalid port number 0 [ 1601.798288][T19422] vhci_hcd: invalid port number 0 [ 1601.822951][T19427] vhci_hcd: invalid port number 0 [ 1601.825602][T19421] device .1000 entered promiscuous mode 08:52:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x6, [], &(0x7f00000000c0)=0xe}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 08:52:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x52d90300}) 08:52:19 executing program 4: ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r1 = signalfd4(r0, &(0x7f0000000140)={[0x8001]}, 0x8, 0x80800) r2 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x20c703) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r2, 0x80045510, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x52}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}]}, 0x2c}}, 0x4000) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x9}) 08:52:19 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c6394100135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:19 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) 08:52:19 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x41) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1602.102851][T19443] vhci_hcd: invalid port number 0 08:52:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x60000000}) 08:52:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x39}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1602.132251][T19447] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1602.147779][T19449] vhci_hcd: invalid port number 0 08:52:19 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00', 0x11}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r1, 0x5501) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$l2tp(r3, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$P9_RFSYNC(r3, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:19 executing program 4: syz_extract_tcp_res(&(0x7f0000000040), 0xffff, 0xb7e0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x82, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000080)) ioctl$VT_RELDISP(r0, 0x5605) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc00, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x2c3c1) ioctl$USBDEVFS_CONTROL(r1, 0x80045510, 0x0) 08:52:19 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xc8, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x401}, @in6={0xa, 0x4e24, 0x8, @private0, 0xc5}, @in6={0xa, 0x4e22, 0xfffffffe, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6a0f}, @in6={0xa, 0x4e22, 0x7fff, @private0={0xfc, 0x0, [], 0x1}, 0x8}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x8, @loopback, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0xbf2, @empty, 0x4}]}, &(0x7f00000001c0)=0x10) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1602.253476][T19447] device .1001 entered promiscuous mode 08:52:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x40, 0x11, 0xbf, {0xbf, 0x6, "60cb1d5771c56c47f715a6e70a26dca16f0e5b0d88016411612334f29354083fb5c8002632d0f98eca08c481555854c8c4b17a10b01e79ffbb0397e293024d43b04d7b352e3cb8c883b50a67d8e2f3bd4bbec4f365116bd7ef97ac577e089ae4cb91abc852a58ba666ba0ec237c7252eed4f600c0558eedbc9c5d0b3601f53a831bab9aa1c0fb53f8fc67e32a94a8a81a9fe086fc4164af77d8342bc65ea424ba5b635bbb14f10f99efbeeff4f7be9cbc934e7d3a8fe4e83609edc125b"}}, &(0x7f00000001c0)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "b7834e3f53487708084480c009ead01acdbdc519553afae0d186633e922593d345bbd7c833f6713010b9dc9de0cb76799ef4a383b2010bec63a74252ee82a1232b1f96fc6c56938cac860158781c525c2e4951a3003309cb1ee66630f3cb25f28b85ae407d563b1f7f4383624535c801dd79e36d5cbc7c2e444661ec35c978ddb7444c852bfc25667e730de0eb43288c68b6976ba05557f65aee"}}, &(0x7f0000000000)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xc, 'I'}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x4f, 0x1, {0x22, 0xc33}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x20, 0x7, 0xb8, "fbbc9c0f1ba3cc4104cfd5d38e2efceec99501275e52a1c7e9f390130c00e76906708910c95c48f1f8b4766167739695e9f9d4f138ede19ff48fa11fd79da23db1285729aeda25c52aa818e7f2df6c02e57dca41390917850e117596facb0c68f58f1abdf69594b816e572fa152f1db4433396492e1b85a2d28be0dc092954561c174cbe5a5311d6bef239c1a1385170ff1e4c35d645968a16e21f3d44adc6d15c8610428eaddc9b69d933fe9d4736eb8376717fa967ddf6"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x15}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x1, 0x1a, "3b2b7cb5bd4bfa1f1392e0234c0e46e4d97c04b3976bfede6515"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x3f}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1602.341296][T19460] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1602.374069][T19459] input: syz0 as /devices/virtual/input/input6 08:52:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x68000000}) [ 1602.446805][T19460] device .1002 entered promiscuous mode 08:52:19 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c6394120135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:19 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup2(r0, r0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="534a0000120000008c888689018404084addb188810006868685ecec57ff5498422ce9cfed1431222092d25f588d1c75e9eb37ed73c13059d44976d322475101d02c731eeb38a59e5eda4a0cc20e92d5802574cb9edb0fa1fdcc4aaf58ff7782bb0b9c92d9102afcd10631f6f11923d4f3ba247aa0af01efee031f438384d3c0e060343f90d9c1dc71ab9f43b351497cfff22010"]) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) 08:52:19 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000080)=0x10001) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x6c000000}) [ 1602.660431][T19479] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1602.736777][T19479] device .1003 entered promiscuous mode 08:52:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000000c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000140)=0x8001) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x40000, 0xa8) dup2(r4, r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) [ 1602.795473][T19492] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:20 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x101203, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = dup(0xffffffffffffffff) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000200)={r7, 0xd38}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r4, 0x0, 0x7fff}, 0x8) r8 = dup(r1) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f00000000c0)=""/13, &(0x7f0000000100)=0xd) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0xace2, 0x3ff}) [ 1602.871566][T19492] device .1004 entered promiscuous mode 08:52:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x74000000}) 08:52:20 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c6394140135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000c000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x7) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$UHID_CREATE2(r4, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x3a, 0x7f, 0xc049dca, 0x8812, 0x401, 0x0, "4672428b3afeea56034a63d04ec7cbfdb6fb0a0b77f979cd6e2430f80c5b67fef37efbfe2feff78e05758e0b1851ca90de2155b610947d76781d"}}, 0x152) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$IOCTL_VMCI_SET_NOTIFY(r6, 0x7cb, &(0x7f0000000000)={0x3, 0x2}) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x400100, 0x198) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) read$rfkill(0xffffffffffffffff, &(0x7f0000000340), 0xfffffffffffffcf2) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000080)=""/117) [ 1602.968734][T19499] vhci_hcd: invalid port number 0 [ 1603.013175][T19499] vhci_hcd: invalid port number 0 [ 1603.044604][T19499] vhci_hcd: invalid port number 0 08:52:20 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4c002, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xb01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0105502, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1603.092941][T19508] device .1005 entered promiscuous mode [ 1603.101985][T19499] vhci_hcd: invalid port number 0 [ 1603.107123][T19512] vhci_hcd: invalid port number 0 [ 1603.121022][T19515] vhci_hcd: invalid port number 0 08:52:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xfa, 0x3027, "8f4606e88c9789d2057beabe0ef2ca1ac2df184e07faf06a17eebde21fff7bdae1ee4775d0d40cef9df42a0e4b892e9836e75becc1bc58ac082e0ea6fa2de11358970a1fcc520e74034d3940ac0e0d613af87113cccd7c132f6de61f26cf4bc7c57ff93cee844e6c3661ffcc2fa604e731ab277bd50e757628a2abae3efd862b3969325222117838d329f12ded1206fab21df77b34183ed74131a9db2771e6f2e64df5f2eec8d2dd850a2ff95891d163ffcdc744c3f66598a869aeca99109733c04e96a8d866fe990f18d5cded5348d4dc2292b6aaabdbc8085e6ed5c8adae6aea27acc015b64d7aa8fd5056dba758c269e1"}, &(0x7f0000000180), 0x1400) times(&(0x7f0000000380)) 08:52:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0x3, 0x9b6, [], &(0x7f0000000080)=0xf9}) 08:52:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0x7a000000}) [ 1603.230215][T19517] device .1006 entered promiscuous mode 08:52:20 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c6394250135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1603.331037][T19524] vhci_hcd: invalid port number 0 [ 1603.385241][T19524] vhci_hcd: invalid port number 39 08:52:20 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000100)=0x14) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x900, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/timer\x00', 0x4000) splice(r3, &(0x7f0000000500)=0x4, r0, &(0x7f0000000540)=0x6, 0x1dd, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f00000000c0)=0xaa70, 0x4) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1603.411291][T19524] vhci_hcd: default hub control req: fa00 v0000 i0027 l0 08:52:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xe4ffffff}) 08:52:20 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x22) [ 1603.569519][T19535] device .1007 entered promiscuous mode [ 1603.680643][T19547] device .1008 entered promiscuous mode 08:52:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x2}) 08:52:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xfa, 0x3027, "8f4606e88c9789d2057beabe0ef2ca1ac2df184e07faf06a17eebde21fff7bdae1ee4775d0d40cef9df42a0e4b892e9836e75becc1bc58ac082e0ea6fa2de11358970a1fcc520e74034d3940ac0e0d613af87113cccd7c132f6de61f26cf4bc7c57ff93cee844e6c3661ffcc2fa604e731ab277bd50e757628a2abae3efd862b3969325222117838d329f12ded1206fab21df77b34183ed74131a9db2771e6f2e64df5f2eec8d2dd850a2ff95891d163ffcdc744c3f66598a869aeca99109733c04e96a8d866fe990f18d5cded5348d4dc2292b6aaabdbc8085e6ed5c8adae6aea27acc015b64d7aa8fd5056dba758c269e1"}, &(0x7f0000000180), 0x1400) times(&(0x7f0000000380)) 08:52:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x22, 0x0, 0x0}) 08:52:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xfdfdffff}) 08:52:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b27a00", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @ipv4={[], [], @empty}, @dev}}}}}}, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:21 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63943b0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1603.957105][T19565] vhci_hcd: invalid port number 0 [ 1603.990528][T19561] device .1009 entered promiscuous mode 08:52:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xff000000}) 08:52:21 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x2a001) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000200)={0x0, 0x1}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0x1, @output={0x1000, 0x1, {0xffffffff, 0xffff}, 0x83, 0xe636}}) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x7f) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 08:52:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x102500b, 0x4) 08:52:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xfa, 0x3027, "8f4606e88c9789d2057beabe0ef2ca1ac2df184e07faf06a17eebde21fff7bdae1ee4775d0d40cef9df42a0e4b892e9836e75becc1bc58ac082e0ea6fa2de11358970a1fcc520e74034d3940ac0e0d613af87113cccd7c132f6de61f26cf4bc7c57ff93cee844e6c3661ffcc2fa604e731ab277bd50e757628a2abae3efd862b3969325222117838d329f12ded1206fab21df77b34183ed74131a9db2771e6f2e64df5f2eec8d2dd850a2ff95891d163ffcdc744c3f66598a869aeca99109733c04e96a8d866fe990f18d5cded5348d4dc2292b6aaabdbc8085e6ed5c8adae6aea27acc015b64d7aa8fd5056dba758c269e1"}, &(0x7f0000000180), 0x1400) times(&(0x7f0000000380)) 08:52:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x48181) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x3}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xe6a35) [ 1604.105678][T19571] device .1010 entered promiscuous mode 08:52:21 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63945a0135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1604.245972][T19582] vhci_hcd: invalid port number 0 08:52:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x2, 0x6, 0x1e}]}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x80, 0x0) 08:52:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xfffffdfd}) [ 1604.279384][T19583] vhci_hcd: invalid port number 0 [ 1604.298784][T19587] vhci_hcd: invalid port number 0 08:52:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xfa, 0x3027, "8f4606e88c9789d2057beabe0ef2ca1ac2df184e07faf06a17eebde21fff7bdae1ee4775d0d40cef9df42a0e4b892e9836e75becc1bc58ac082e0ea6fa2de11358970a1fcc520e74034d3940ac0e0d613af87113cccd7c132f6de61f26cf4bc7c57ff93cee844e6c3661ffcc2fa604e731ab277bd50e757628a2abae3efd862b3969325222117838d329f12ded1206fab21df77b34183ed74131a9db2771e6f2e64df5f2eec8d2dd850a2ff95891d163ffcdc744c3f66598a869aeca99109733c04e96a8d866fe990f18d5cded5348d4dc2292b6aaabdbc8085e6ed5c8adae6aea27acc015b64d7aa8fd5056dba758c269e1"}, &(0x7f0000000180), 0x1400) times(&(0x7f0000000380)) [ 1604.348571][T19588] device .1011 entered promiscuous mode 08:52:21 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13}) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/134, 0x86) 08:52:21 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/255, 0xff}], 0x5, &(0x7f0000000540)=""/194, 0xc2}, 0x40010000) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x4c}}, 0x81) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000000)=0x4) [ 1604.445483][T19592] device .1012 entered promiscuous mode [ 1604.523215][T19601] vhci_hcd: invalid port number 0 08:52:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xffffff7f}) 08:52:21 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c6394630135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$fscrypt_v1(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'fscrypt:', @auto=[0x64, 0x65, 0x39, 0x31, 0x31, 0x63, 0x34, 0x38, 0x39, 0x30, 0x65, 0x32, 0x31, 0x62, 0x33, 0x32]}, &(0x7f0000000140)={0x0, "fe35a1a4b7127733baff1499d9492ac50b7ccdcb3b1c8b59219e8c2db3b9a629335882ed95d74385d816564624c2cd6ba2049fe79d36bca1e0e46a6b5794541e", 0x16}, 0x48, 0xfffffffffffffff8) keyctl$describe(0x6, r1, &(0x7f00000001c0)=""/104, 0x68) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6382, 0x100) 08:52:21 executing program 1: epoll_create(0x7) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0x83000000) 08:52:21 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xfa, 0x3027, "8f4606e88c9789d2057beabe0ef2ca1ac2df184e07faf06a17eebde21fff7bdae1ee4775d0d40cef9df42a0e4b892e9836e75becc1bc58ac082e0ea6fa2de11358970a1fcc520e74034d3940ac0e0d613af87113cccd7c132f6de61f26cf4bc7c57ff93cee844e6c3661ffcc2fa604e731ab277bd50e757628a2abae3efd862b3969325222117838d329f12ded1206fab21df77b34183ed74131a9db2771e6f2e64df5f2eec8d2dd850a2ff95891d163ffcdc744c3f66598a869aeca99109733c04e96a8d866fe990f18d5cded5348d4dc2292b6aaabdbc8085e6ed5c8adae6aea27acc015b64d7aa8fd5056dba758c269e1"}, &(0x7f0000000180), 0x1400) 08:52:21 executing program 2: keyctl$reject(0x13, 0x0, 0xfff, 0xfffffffffffffff8, 0xffffffffffffffff) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000040)="450220848e62a141becc8fd016cb3951f0a018b65fad359d87230112ded70628") r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x19, 0x4b383) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x113000, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x4}, 0x4) [ 1604.731095][T19611] device .1013 entered promiscuous mode 08:52:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x0, 0xffffffe4}) [ 1604.800800][T19623] vhci_hcd: invalid port number 0 08:52:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0}) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x8, 0x80900) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x1], 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x38e3}, {0xa, 0x4e23, 0x2, @private2, 0x2}, 0xffffffffffffffff, 0x2018000}}, 0x48) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)=0x5) 08:52:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000000)={0x5, {0x1, 0x80, 0xfffff609, 0x80000001}, {0xda8, 0x100, 0x4, 0x3}, {0x40, 0x8}}) [ 1604.843672][T19621] device .1014 entered promiscuous mode 08:52:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:22 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0400fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x800, 0xffffffff]) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x783b80) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/139) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:22 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={r4, 0x6c, "3615a02ca52bf4440ce5b634d4f839743f5dcca0ed80e7fcb182d661060501f5c9666204b455a927f685165f4f10172a80e28d1759181b7d3e67a45758accc438062379923869d5d9472b5cae881bd73a6527c86456bae600a020d8da48d78751ed11ea66e3d07481a110a01"}, &(0x7f0000000100)=0x74) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000180)={0x2, 0x3}, 0x2) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1605.140345][T19640] vhci_hcd: invalid port number 0 08:52:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)="98ec80f1888f40b25c8959cf25c6e10070ebb5fee6e00bbd95df5fec1e946a7ab71b7ef35a923a86c2fe9e88ead9f1c441066f330228a2264b4c731aa98ed35a888cfb3b3fad141487b46bb23caf932cae21f9c7457bc84167444c708bf87c654a9ea174f4ced4e499a4271b00d4a3d1b19288bd2f9d8080a1a1da442aac86e456453cb81700c6fd1598334f201f7d211e985f11acf83d66b6522f3592610dcabaf9aa8138bb27371aa66842b77050595d0e0ab011861277", 0xb8}, {&(0x7f0000000180)="0ad6091017bdb2b166ca63aacaf1cd95b22011caa6b81b5eb012b479f1b1cc60bf8fc084180b31230f006b4d2519dc5553ab67e9a61c6f7f4309a19e0e9ecfa654a1f9a12fd4f8ac7b62d65ce679dac3a349309f3549681ddb7e36e2f5d8e11abc4896777f3acc3451c698c2", 0x6c}, {&(0x7f0000000200)="22b017a1146c53", 0x7}, {&(0x7f0000000240)="ab4e8e3849c1a36e06da5b41ea40edca6d5a79aa7881aab2b9fcbd7fee78eb3e54488db7a46b3c2496c8f40b1cf78f115be8e155d5c2941684e082feb03f36ffaf43d80d31f6b50fbedf72fd304dc502a60ee73e8ff6ae6d06b304bb3cd889611561e0f9a946687afe37", 0x6a}, {&(0x7f00000002c0)="0a95a5e74dfed85e4dd227fd92295a0d433de39e9cd18e9deb39b2b5ff607fb2f5a30eed801e2c396205c5a8aaee4792f44008a588e5fe37cbcc7ad8a5189ca72a4258a735f9eb0a8e15186371d481da2ab32fad6cf9cf8a0821a9c83d9e1cedcf9db021f5990322a915bd9fea32eee601bd4d5e8d43d9fdc8b9f4dc9523775b36046f4bee9303e2c69c6df440f8ca94120f4052870229eaef18e37e4cf631e2bce332456d067a", 0xa7}, {&(0x7f0000000380)="990e0e1ecd5588771b50b18f665c1a92244338b5566b6e6974ce94fae940fd3a62ea77c965f6d1f676f267a5773435afb3aaef5a3a1a2e329092eac99a0bcf7f9fe8b0a4b4049f80c82b4835328a021158fcda0d8d483714c90f2a7568ae14f8a5299163bf4ca0d1db20b08f651caabe5e207af874f9aeb832b172806b32c4063a8659d112123ab2d2ab6e01c0ce13a62f712f8f448dceac58086b85fb976a1aed9955c73635063cee51e49caf3d3ac4a779703b8f7b84acecead4a41376f34ad91a1896fc2af87f", 0xc8}, {&(0x7f0000000480)="6d6b7f8fb4ecc7af02efa0986788b0085835a6937bd905a63cdb93b9e71723c5e045d043862c2e795903fbb8210fac9fad1b0540", 0x34}, {&(0x7f00000004c0)="68f313a1c63f47abc1ac98084120bedb55e26efebe894ae8abb1e11f0408ba8271a7f704312b23bd0fb501c57e57e5c654bf5cae021499dedf2023", 0x3b}, {&(0x7f00000006c0)="3e857944f18ff4f16aee22a4f3aeb435b5ca55ba59fc05337668119ce11ad3ea398f6e1e9d7fb6dbb22dc302056428b1c1423fa278a8b32fae68758980b262e8d3c41af8560160d83d59e193ac91b67c80ade376ebcb1d1630c2bae9652e4100e51924aa7f6e40cbac233c4fbdfafd1061c13aa3cb49d3b8674a88bc6d2f5661a6cd84545d97b5f794e3e1a00d1095068f00730d537f1d43e306d6118e4d1cb0ea67348596d0fa149a70785ac935c3f996d63eb46c9967c9aec3f12b64134bf13f6ab346de4ba09aa9b324484c94981200000000000000000000000000180d4d240737839451ac51a49469793a99d7646c329adc93d6e6c040533f248b82e187bc74bfad5aa0e1a068a116c63793c7d47d87f003330231df40ec305113433aa50fab8769cc0f12a6cdd3cbb5d9a5bb6e823c3217c4f78beb19bd0928960605ea2c59a98daa83a4a1b2dc30162fb974", 0x14f}], 0x9, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f00000005c0)) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000500)={0x7fffffff, 0x2, 0x4, 0x40, 0x7f, {0x0, 0xea60}, {0x1, 0x1, 0x6, 0x0, 0x7, 0x5, "e344f759"}, 0x9, 0x1, @userptr=0x7, 0x2, 0x0, 0xffffffffffffffff}) r3 = getpgrp(0xffffffffffffffff) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000009c0)={0x60, 0x0, 0xffff, 0x40, 0xe3, 0x8d, &(0x7f00000008c0)="da603a746c878cc4d47bb1770f79b65e391e842e3d22e601547c1d627c4aab3d73fc78caeae15279f71467af69e67f6748ad4b78f2f3d8cd6792605404f6eb01019462577e01d5a65cb41501293b74639207e403d10549f0977259ce8b4b3126252c805bd1e09c7caaf5541abfae02356052fea863c8b6bef519f6a16425784eb9178ac2428ed898e3421ab857631d62c109cbedefc9d37141c21a3721d1d1c3548805ed61751992b013f3c6716afb96a6f9196f3bab198d55c84b656f7dda2e20b6eee7dbaabb8867c92d98e784ccfbcd2963b2e1fbe3ebb1efa9ae55b01ee980b422"}) sched_getaffinity(r3, 0x8, &(0x7f0000000840)) sync() prctl$PR_SET_PTRACER(0x59616d61, r3) fcntl$lock(r2, 0x0, &(0x7f0000000580)={0x1, 0x2, 0x6, 0x5, r3}) 08:52:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:22 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0235fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0xe, 0x2, 0x9, 0x0, 0x40000004, 0x0}) [ 1605.325506][T19652] vhci_hcd: invalid port number 0 08:52:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1605.417588][T19652] vhci_hcd: invalid port number 0 08:52:22 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0335fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3f, 0x3f, 0x6, 0x4, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8, 0x700, 0x8, 0x2}}) write$P9_RWRITE(r1, &(0x7f0000000240)={0xb, 0x77, 0x2, 0x7f}, 0xb) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@ipv4={[], [], @loopback}, 0x4e24, 0x401, 0x4e21, 0x4, 0xa, 0x20, 0x20, 0x2b, r2, 0xee01}, {0x81, 0xffffffff, 0x1, 0x81, 0x7f, 0x3ff, 0x3f, 0x8}, {0x40, 0x10001, 0xfffffffffffffffc, 0x1}, 0x80000001, 0x0, 0x0, 0x1, 0x2}, {{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x3, 0x3, 0x1, 0x3, 0xccc, 0xf4e7}}, 0xe8) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000280)={0xf, 0x5, 0x80}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000080)) 08:52:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x17bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1605.623296][T19665] validate_nla: 14 callbacks suppressed [ 1605.623320][T19665] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:22 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'bridge_slave_1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x400c005) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1605.685211][T19670] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:22 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0535fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:23 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0635fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000180)={{r1}, "254506d48c7a1156d05c664878d5858ed670ac9b518d727dbfe6e8c7312352c46c78deca958a3344fce5dc2970b99639b98790a6dbfe109dd4f119d68f4855723032d59ed1743d4d34f52cc4764576ca248db2b6e6e0d80ec4bbe870addb99706e49719c7d570859f6cf4cb457441d33a6a871c6f3b657b04938235ee259697267ca49284c6349c9c387f4945ab539400d2fb20265449bb1bc0969e353883de8e094f49abce8020d0839df195c480289c937fffe49d2d3f834c018811a30c5b13b7497f8e93d9034954c19ff61b1722c9181c3f7c9182892027ae3ca96efdb1966f3b6491cf7aca041aaf87ebfd829921f15c67c64d4702f9d4a7f3e3353664e58749fad81f1be0431c50e9f48a0b33f448b093b23a2e5981486e7610523840a8fca0740aeb5dc190de8d407a28895c664ad393361e2b5c7d2fa03f17d377acefd9140b89443c851c732c885ffc95c3f4fbcdfa74a662e91574179d456af474ff6606c6c34ae31764c2692696007a70d39d35d883c4ac8a92d42681ccdf5501b1c1fff88d1d8cfe70cc20919d3e609d18a73edbec921e44ed4328ae05d8c7907812176a48ba05cc928b67b0e71e76de73493635a0f6f0904614bdcc4eb4a13691f53af60b7be2f133285ec5dbc19f8a55b17e78ae83788c85c956ac8ad1a1d6ea37efd1494eb20cc5d28347749ae67e02b4a25785deb09d3b9fcd545a5b6c1bc31a8af5a9616774a12dfc1a026e504caf5d5e2fc35a17a43892a03526884ff9f8128333f956314f268cb4bc8f3b71507f431ec2a88c691d0e3108bcb80a3febf530dfdc236656c1f6b64a721bad685acc5e450ece9d0b9af4c322bcc52a72f818455916b225cbcfeeebd89f1a9db3e1dbfa2fbbefaa62cf05d34eec48cb2cb1485189ef313708ec48f096bd9d6632e09a2adc5db86e176a4d92698986229583a035f11be33066f194301f70126d4579e9533d85d8463af2185112729ea0b58db30a62fe1b218c8ffd3aeff3408097db912901aa2160f6e794b56e3ceb6258b6070a53f33ed32014b50502ac57ee75b2a9d56816259309dddd5c60c8800879648751fe5e26060f9120c9815318da7408af430a7f92d690eac0a2a60dbd0ec963f3e8dcecb3ac5d5108fa32a6403dbb19021441ffc58bdf6166d4c95e2b8ced17bfaaa7b09213466d37bdb8e4ba4a9361ed41a896297a6940969eaa2da752025de206591d2dda7d5ea745ad2746c05e6730d8e90b50e07f4d184d61f8f152de6cde8c7e3a973d6bf39d9313b914d227830c2be4cffd5c83861bf92fae91051312b9be3655a1e4f333dd6a2ab9862be68a7f7e2075c246198c65abdd54db16d234dfe01a00c0bb6dafb47187a8731911892af8d2f6c2b7ac1f6423ccbcc2959249ad81119eb7ae6f77b3b546fb7b5c0f715d35d640855d280d57edb318851f8eedc4b14fa0d03b6fac59351d47e706d6ecbdcd87af45169655a5de95d017ba0115fdea3915fb85d7c4031f6871df4c892f2572618b602c28d31a6fa6bd77e204a540f1f59b4e8788a533fa2c3de911faffdc62023d8f52b0820cf50203302666667c7847420780ef1a6e92a8ac9c079ea1ab30261c77358ea5e1577ac3af86ba5689c40ce251922fa5c9cd09f12472a35dbffd5f16c7004a7a34964fdbc344be1cc3dbf81826441e8a3c567b4b5bf95fdf710ebd04e2bd7fe7f70016efd3f9140edfd884d29b8e15f8784e4af7e29ef8be2f0f9bf9bb338a6373036dc073afca69daa4d8042ddba3f50ffad15a1305763c7479eeda0cdf18ad0a2d4ecd2e10dfafa75e51b980fc4ecc4d675dc575ca896831023717f70b2d87fd6ba7bbf89c9499e720cba2c0c1a6938085d1d650af95924f0f945a76e26d6c89715c53e4380290297965905e9040ede82d1bfeabed94ae8ab9082b3e486565f1a4b2ac4662768241cab038339ee3d15b9e482aedb42f15a986f7da28a87bbfcd14a065ab557b929a782ce9b8c49697a013fdbb016aafcc7adbb3d26e30f3867a931b257e018a630867ade13a1d7d7237fd8afa1656b6ab6e6c7211828f84b518e684229d5e4731e5ca1beadf600c272da4276da0326044e7c8e3e5b31acb2e45da374c4ac10bc73a9d4a3337173717f696cc72929b32d685cf64c560b151bfee3fa9725f26282feaaacf80bef002f61734d6c4e9049b5f1dd7d4140f9a78b4682acc38dc480f69485b1307d354bad20975142ac51a25bf82ca178e5a6ce10ab74d42a46bf2f93323509e5c08e65a2121c06cd7aff3a96fc5ffb9faed869d98db9b35910e2adb696fda59e856ade4be9b1efca9b32d5f345fd969f55ed9e499bfe16e6fd4feda2cffd29ce35ff06c8ecf35967fa234849114fbf38d15e1a7a0f746d175ad061ff0ce60670269f6d6378096c10447790156c51a953d33ea9f7a673a00bb108ccd2313a5be79a271a9f357c183102a3c0ff2721be683106e05fd7ea867d6e46a88ea18f4ab4577d2b094eb5fcb6bbefe2ecbc489a4014381917bbe36728fc750b7f6a28dd78b097f3b9e16597af56bbf05993ea7afa24e2ed809f63e14bace0d137b37a2ba7f921592f102b312bed7c4f62e68e444ce4b6db83de5673587ca9f7400545ade456a0e61f105989755a9d22f6dad123a9b2b1193644e709d8ae88f9350be27b93af73c42eb002950ab6b97831c6ba6f240f37425d22a42cae53647b736651b7c3ac6f57d752f81b7cf1f7a91193c842d13d5cd6ce5f02b897ab7b4c4ae0a7a9c522d56df8fde13457d6341b4aaa9d68ba54acf5cd7dc43431766be0b43218542d8dc27cbeb18bf64fe6f4f9266aa0b7fe7122e216707f8373e75a5deaa7a9ef59f57a6f5b6016c5369419436f3b5ccc709767b692b27f685497d49613723727aee1eb103c969393098e67dfc166314af5a1a9e345474aa7c1853b2f0eb634a828f024a4605ae1d9bc4fd3e520b441b887d8a5d33e8cb49ff6d7fd39c20cbb3278be58275bec4a1d9d8130d6609cfc9203ef6bbce5020af0af68bc2021a186c92e99b3e07aa992545869f83eeb128923bc8d57ff0bb05cc522ce36af0db678ebec5a5ae562f573e7d8fff6c073a007ca9d6a7a80034b2622623b208adc479dae035fa3fee9eb66cf3396e51149aadc47589e8caefab1b03b453983eab2474f3bed2433f7de7e6c8ecf634b5f25b1c9b7a91a2c0b17bdc772f39ed396c824936eecfd78eace09c9e67e972fa36e3967e2c0b80ff57fd0ce2e2007f5184f5642cdf20f05ca2f9c1f90accb27ea02641c8bfbec8be3b6b0369f45115a3910fbc219e41dbb4818c25f7caa64463a5630749dda2fd1837c4ae05e4802f86286affef5100504af22f4896a5be5bae9f60aa6fb46b0d76fe33f537319128caf40887a74429be3249e4a9aba476a5916b30b1c81ed1187337fde8bde00383b30f1663d301ddde7860f36e287b29f1e99969cfbc4d0a236ddc4b969cb6482f736c5b94dec203d5099915dd59c7d005d1765ad6a4660b478d943d0f53f7ebc901b1d2b266ff6cb63ba5ffd47bbf1feb2b5b16db6744a2567911a83ab1be234debfc577698c641972035d10d84463ea48e529916764ac48d4474ad1c26191f9e37a8416e32d04962508f36104250454233fc2ecbefd219e05d248f3d0500718abdb1d1ab84919bd69499542a68585390a81a4b1b2c08b06ffd2b99745d36304c230e1001fce93559f2de4931017f26146679ee37b6f8d78bb9761a25cdd01307bcd5c2d3254dc32c0140576d25c0280f14e1672d37016ec7e296ce8f25b3f829968cce8b4457212b6e78d61b7472dd41e5be4321fc409c2b12613c3d6d85fb0d9e0a551ce748228ca91ca0ed6064d945857d3c14b50dc8cf9359c9b4e840439207eb9ec7798e01495f383d5244da976fa7c2da64fe2fd4ecb6e6bbbc36a8928aec06c2958a3cea40ac9868d6a831ad8f4525fcd4206f6de99754f83333a7f8475242cc63f6ac44f47bd33b0a0f6f8770a2d25605e3bcb904520b9a39c4a5f883fd5861127ac225596e350b481a0b45377d08de7d2626445c881075cb59a2459d0d2a538209fbd03f1cedc837ec36a93a8316a48e2e087a24b1ffdb2c1311fe87995bee1b06e7f9242eb33803209a9281b7e3178b92d41681677c43c16186d5dba0249d88bb88dd23597ebcc649cc085bdf09841868e75439632326ebfff4a2537a40be3282fc90d71d31a9c2e31be199acfeb4c4d15245997aed01e82f018da4498e04d368eebbfb19780365595ef5e4fd48ad66d65aa674714d10fb32586e5a7ece36bd76cbfe4d4daa54d437609a8c1455c68ee28460482ce82ef59ce06120eba0badba634347782bd22520b03add9cdad2970da01f3d298a8d28f01fb2899228594bd055072e4ba41d015e8d48113df1423d8671d189e6b167fbcf63d492123d48f673367cd6492691dfa018856d3ffa640d9dcce8924b3b9f9ee510bd4e0d2c484d75e776adaa3e8002d8c58542273b827cded20d84648ade04d1392154043899eac1d2eaabb1abba6bc29b5277de5eb3fc9816bf8ca4ee2f319fc8a183b69ef0b71019e314717ac64386b260908dd5878652b5a885a5d375777a2f6239e7f6fd1da12a48e56d9d25a37a84700a285a0ab4bd4c7a6ae81d807292951888c61cbd3f1be077604fd5768956e1f9a4418b1e022fe02f710ae79e7b26a226e28867972bdc705111964cdd59f6a6625e6ae27c57fd96ef3d7c15c620aa25e95b5c55c6492feeb4b431ac60b2759996ad06bfcea82ecda3d29db760e06be8b6f7d2aa1a9be05416dc536d3ed17fea3bc9e5720b8afd6a15164b99aac41a209dfa926bc1a477611b2f4f7eeb4094dd87c87c338da6894178bbcd64e21c4c374ec518ae4da9290127a468b53f5fa4858c992591206b4d2618b32cb8086f05e7f5224a8497d39b5619b05a8071adf50a5b49b420e7d39897bc2e336e2d8774a59ada264bb638f5d147ea70d953a78023587db8196eb64ae3925f5d32da3bbbe8e22b0c7133966c4a1faf02d4e9e40f521bd5795e5d44cd90240d9382443588a10630494c6e4732f9eea1442584ccade4bcc0b174b3e44101cae8bf666a60490f80a6f74b2fb2e5e956a1d5fd4c1cb699833930e62c34aeda55fcc902bb14d7fc7e3d99e92ba514edb277ad4204a3567491783c2e1208c3275998abd65d98a085fd4a83f01fc5ed40b18e411ebeca7455fd3ad56402cf45969e44badda6db5f47671af0d57e5dfc906fc360ea6541aa95498bb65aecd31afa8a0e55cfb10fc379179fd76d8894a2c9fc61d9be98a9888b54341daf91349f83e864ebfa1f57beb2586976fc6e5cbb0e44676db371064dfae8c215a8c7950a0256ab754edd24e1a2775cb651043089358e440a179d9cd60d60c08ac06dcbac2bd7c39e310589adb1d5d1736a166d5eb1a5958859c5cae8e9319406d0d3c0fcda7e9374b99cfefb101ea3b7af92540e89e63886e40ae5e5ba19a80101ffedff60533ebe5570deb2cf224955ee254714263aa5d13f8c12f5d1a0bfc8b8eb5a86435ebd5f4bbe2b457d571adfd45aee791538efe4892f533f03e4672cff471d5bdd7e2ea4073f68ef5eb159909cae32bdf94acff11b901b75f5f46ddabf7dac2b9f620d7ac0cbd02a608d1c36d1f5cc2831d7dd7b94a130faff42fd12e2f785feb8df48fa8483b3c92686e6a0de530995bbb338e2d73ab434457ad49d03a3f79e33ca11cb4fcfbe3e9bbf00706251f09632a7be61b4ae81aa6e3b9deed6bd5156a1e8bafc1386a3"}) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r2, 0x0, 0x2, &(0x7f0000000000)='.\x00'}, 0x30) 08:52:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/192) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) 08:52:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:23 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x80000000, 0x2608c0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="eba1b6d57ff31482b543e64ddabaf3000000", @ANYRES16=r2, @ANYRESOCT], 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x42000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '({@$\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc810}, 0x20008800) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000000)=0x4) [ 1606.120588][T19687] vhci_hcd: invalid port number 0 08:52:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@broadcast, @broadcast}, &(0x7f0000000400)=0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1606.180530][T19687] vhci_hcd: invalid port number 0 08:52:23 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0735fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x88200, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xff}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7fffffff}]}}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}]}}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44811}, 0x4000080) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:23 executing program 2: r0 = eventfd(0xfffffffc) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x78081) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) pidfd_getfd(r3, r0, 0x0) 08:52:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0x3, 0x7, 0x7, 0x3, 0x3, 0x0, 0x22e, 0x40, 0x171, 0xffff7fff, 0x2, 0x38, 0x2, 0x4, 0x4, 0x20}, [{0x7, 0x5, 0x5, 0x22e7, 0x1, 0x4, 0xc1, 0x4}, {0x60000000, 0xffffffff, 0xffff, 0x4, 0x6, 0xfffffffffffffc67, 0x3ea, 0x9}], "57957fa7f8e9077e2a69b68c47cad49d04e75fa0300a22dd0a3415ccc894cc3d25f38712eee5506c67f955517bf1f8639ae5a6313111c49608812044d7214a16e9e084fc4727b33c137300e09f6bb3151e80787942fe64cf762709a07e1923e3b37167f0a406565646558502e39589018db00d9b64a57ec6dd723d77536b", [[], [], []]}, 0x42e) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:23 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0835fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:23 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000000c0)=0x2) 08:52:23 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000000)=0x1, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:24 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0935fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000)) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x1) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000080)) 08:52:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000001c0)=0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x81, 0xc}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24040840) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:24 executing program 5: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:24 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0a35fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:24 executing program 2: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cpuset\x00') ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:24 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000600000000000000100000000000070c0000001da0783abfc7c70aa67e855bb8e752ca9c", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', r5, 0x29, 0xff, 0x9, 0x3, 0x7e, @mcast1, @dev={0xfe, 0x80, [], 0x1e}, 0x7800, 0x700, 0x40, 0x6}}) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f00000000c0)={0x7, 'geneve0\x00', {0x3ff}, 0x8}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000280)) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000100)={0xfffffff8, 0x5}) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000240)={0x1, @tick=0x4, 0xd2, {0x14, 0x1}, 0x7, 0x0, 0x1f}) 08:52:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x40}, 0x8) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x2, 0x2, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000100)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x1, 0x14, 0x2, 0x0, 0x0, 0x200000, 0x0}) 08:52:24 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0f35fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1607.384587][T19752] usb usb2: usbfs: process 19752 (syz-executor.5) did not claim interface 0 before use 08:52:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xc, 0x4eab81) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001580)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229bd7000ffdbdf250b000000050030000100000008002c0088de241008002c000900000008003a000100000008000600", @ANYRES32=0x0, @ANYBLOB="840028000000010080"], 0x4c}, 0x1, 0x0, 0x0, 0x8005}, 0x2000c080) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001500)={0x6, &(0x7f0000001440)=[{0x200, 0xf2, &(0x7f0000000080)="fe08019dc283e024a49446910597385b00a48031ad07d1ce29937460019aea5d91c5194c61fb02a25183bec69d4a63da591b26e08089d1ea3a81115d770a3b54572a94041854a33634764bdc68fdcfc8875d8b8f854595000b67134bed7668dd05eb793a6f7555668b39b10114c2b757563edeb5a97e69f39ef608f2a8e7f1752d1a2a30d4d8d9b3d12639249d72b0e9b67de8d4c9e52ef93221aa4b7824de56db8b5301d5f24a10792a32fdf2b30d417adaed789de6f61748690e1140fa02011af3c856322cb400f03feeccc6af5fe2292353983ffb5f7a9be70a8f52fc28d456b7c905c760ff0cd7ba34d89d7007340585"}, {0x5, 0xc4, &(0x7f0000000180)="fdcd1e7640e3e387070f7fd6b8e907ae172f8ad7bd48814ca4410b89e8d69079652125badc8034ccc8bd6b59b2dffab5d7064fea6ab4a21c29f9ec1a1719eebece5da649b211b5e2ec4da2e28f2c687968c084622a8ad7827d725553f018f5c0ec81119dc797c38dcd48e61d40ee2adec3279e2fe9e26940ab3f074cb240695e5234f1b0d6fa5459d9355b8fd2c6ad7f89e05f0f4032288a617aab7cc36f24f69d7a0c5200a925e1200fda2071d987c073dbc137cab74ce7c1f31afef7aad1cd46caac7e", 0x1}, {0x9, 0x1000, &(0x7f0000000280)="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", 0x1, 0x1}, {0x80000001, 0x74, &(0x7f0000001280)="dd9079be55e4c7e0cd82e4ede0e23da767656a7b951b72a472affa64c1ba4c5e38ee8852ce3ccb8e62099f203d02df2ecc543dc8f28f33d1da577c2f462bf9553592bf77812fb8439db62e94fa9d0350dc39f0623d4908c657212956b7298291b4931c7e1147a024947c9013fa11d108110cde86", 0x0, 0x1}, {0xffffffff, 0x6a, &(0x7f0000001300)="3a4cc433134cfda9efb814aca9a25e6aa847a808969f945fcd1091f497177c061c76d6ef1d045902adc41d9941e80eeb8f9e50d476b1e5582f135b3c2deaa0ab9ae9af6cf4c41ce64d4f7b31ea2e782a2fe16bb8dd0ce1c9c969e1bc3583249574683da4fd1e3bb76cb8", 0x1, 0x1}, {0x6, 0x8e, &(0x7f0000001380)="b5b2685b51c6327ed1fe5e63993f02b7ee9f74567358d5aaad86155a1431ee5518996bb58325950ae08ff8c69c8e53dab3e3ea929679f36dc2e915848efbfb1eecee048e25e63aa0c112c060e194fdf99635beec27c17142d3124bb1e51fbaa8b5f5b165076c37f5bd87493ce93752d9120a0d98ca93c88af4c8fcb5f4903bb690149fea615b703d674f8a83d6cc", 0x1}]}) r3 = syz_open_dev$vcsa(&(0x7f0000001680)='/dev/vcsa#\x00', 0x7, 0x40100) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740)='devlink\x00') sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001800)={&(0x7f0000001880)={0x90, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040054) 08:52:24 executing program 1: ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x9f73, 0x2, 0x3, 0xc553, 0x1, [0x7fff, 0xc12, 0x57a4, 0x6]}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1607.484519][T19758] usb usb2: usbfs: process 19758 (syz-executor.5) did not claim interface 0 before use [ 1607.549394][T19763] vhci_hcd: invalid port number 0 [ 1607.619015][T19763] vhci_hcd: invalid port number 0 08:52:24 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d1035fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:24 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0x80045510, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:24 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) socket$pppoe(0x18, 0x1, 0x0) 08:52:25 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d1335fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:25 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:25 executing program 5: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x8000, 0x8000005, 0x7fffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socket$inet(0x10, 0x2000000003, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='syq\xf6\xfb\x9c\xcd\xbb\xedH\x8e\xa8E\xd5', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x110) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) dup3(r0, r1, 0x0) dup2(r2, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000180)={0x0, 0x1, 0x10}) r5 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 08:52:25 executing program 2: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x5c, r2, 0x800, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffeff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xadf}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3177}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcbc}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044810}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xefb}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40800}, 0x48890) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r3, 0x80045510, &(0x7f0000000000)=0x4) 08:52:25 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d1435fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:25 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:25 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="60848fa5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e22, 0x1, @mcast1, 0x3}}, 0x80}, 0x90) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:25 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'veth0_to_batadv\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x11) 08:52:25 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d1b35fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=0x1, 0xffffffffffffffff, 0x12}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0x4, 0x8}, {0xfc, 0xff}, 0x2, 0x3, 0x3}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) 08:52:25 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'io'}, 0xa) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x480) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f00000000c0)=0x9) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x4) ioctl$KDDELIO(r0, 0x4b35, 0xfffffffffffff61f) 08:52:25 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1608.637148][T19820] vhci_hcd: invalid port number 0 [ 1608.692295][T19820] vhci_hcd: invalid port number 0 08:52:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000030101030000000000000000020000040c000e80060003402e90551d"], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x4000895) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}], 0x1c) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000100)) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) readlinkat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/223, 0xdf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x7, @private2, 0x9}, @in={0x2, 0x4e21, @multicast1}], 0x3c) 08:52:25 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:25 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d2135fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x8, 0x1ff, 0x1b, @mcast2, @private2={0xfc, 0x2, [], 0x1}, 0x40, 0x20, 0x3, 0x13d}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000140)) 08:52:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000080)={0x0, "58134e5ecfd47fed674292dc16773f7d"}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:26 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d2535fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f00000000c0)={0xac, 0x4, 0x7}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x2000001, 0x10010, 0xffffffffffffffff, 0x83000000) 08:52:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:26 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d3935fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)=0x101, 0x4) 08:52:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=[&(0x7f00000000c0)='\x00'], &(0x7f0000000340)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', &(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='Q\x00', &(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', &(0x7f00000002c0)='.{\x00', &(0x7f0000000300)='/dev/bus/usb/00#/00#\x00'], 0x100) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0xe4042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xdc, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20014000}, 0x20004005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00') 08:52:26 executing program 1: ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001340)={0x3, 'veth0\x00', {0x1}, 0x1ff}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x10000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001300)={0x1, &(0x7f0000000200)="0f5a6731f398a455bbcec6c7e8fa59e35dbd55f212367e880d52e3a78bd18d17e562d539cc3b995675efaded452f38374f00738fb7d5aeb907d506e85ed83c0bb40f499f658402901361b8b3bb5ce3e892bd5d5e3cd4175cb867079712d6c667dc64d089fe6d290de6facb3554c5e99ed94e1cc8e4c3a22a90361b27eda89e824f31d452b5f51b2b16f80535719754914dce1be186807a0156802c1fc72f19f130c5fce7b5b7556e482cc8104d5159a28db13945419a85eb85bea4336d7e8041533859832c4fa5c4188d3d13277ab84428402d0932596821dbe0a66302c52a7a", &(0x7f0000000300)=""/4096}, 0x20) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000180)={[{0x9, 0x0, 0x1f, 0x8, 0x0, 0x1, 0x40, 0x80, 0x1, 0x6, 0xfa, 0x2, 0x6}, {0x1, 0x7d13, 0x6, 0x5, 0x1f, 0xfb, 0x8, 0x3, 0x3f, 0x3, 0xc8, 0x1f, 0x6}, {0x7, 0x9, 0x62, 0x0, 0x5, 0x7, 0x4, 0x6, 0x1, 0x1f, 0x1, 0x9e, 0x2}], 0x9}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) 08:52:26 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:26 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d3b35fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:26 executing program 5: listen(0xffffffffffffffff, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x1000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x9, 0x2}) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x4, 0x64}, 0x90) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000200)={0x1, 0x52424752, 0x2, @stepwise={0x1, 0x6, 0x4, 0x0, 0x80000000, 0x401}}) 08:52:26 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TCSETX(r2, 0x5433, &(0x7f00000000c0)={0x5, 0x8, [0x5ae0, 0xb5, 0x0, 0x3e8, 0x5d], 0x800}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000100)=""/24, 0x18, 0xa06f115, 0x9}) 08:52:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:27 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d4b35fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x93, 0x9a, 0x12, 0x40, 0x47d, 0x5001, 0xa560, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7d, 0xbe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000100)={0xc, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x8, 0x48, {0x48, 0xb, "79175a1092e2f5ed27cc26392d9701953c5b619236b47272a6b4ad0f726319b4c29a8349eb7a32f44c3df43cce3496e199c73e2269bee683597bbbaf407eee8647f92e1a737f"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x0, 0x27, 0x39, "67a1b30a6755575a8a1ebc8a79d890f11b64de4fdff5a3ebbfded8a9f113723e3aa04425bc52cfd482e45c24706bbc279d0d6be65b4dcc7829"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfa}}) keyctl$assume_authority(0x10, 0x0) 08:52:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x4c4002) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)={0xc, {0x24, "551ebb26654d7107520bafb758f3cfe3c090c855783a0630c82dfada7903f9e9a07f8b61"}}, 0x2a) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TIOCSBRK(r2, 0x5427) 08:52:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0)='wireguard\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000ec0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)={0x50, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x3, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}]}]}, 0x50}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800060}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r6, 0x80045510, &(0x7f0000000000)=0x4) 08:52:27 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d5a35fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)=0xffffffff) 08:52:27 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) prctl$PR_SET_SECUREBITS(0x1c, 0x32) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) kcmp(0x0, 0x0, 0x5, r0, r1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1610.435615][ T5] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1610.470670][T19919] vhci_hcd: invalid port number 0 [ 1610.524031][T19919] vhci_hcd: invalid port number 0 08:52:27 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d6335fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:27 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x8000000) 08:52:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000080)=""/87, 0x57, 0x0, &(0x7f0000000100)={0x23, 0x3f, 0x8}, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1610.796294][ T5] usb 6-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1610.845896][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.876943][ T5] usb 6-1: config 0 descriptor?? [ 1610.918089][ T5] gspca_main: se401-2.14.0 probing 047d:5001 [ 1611.355722][ T5] gspca_se401: Wrong descriptor type 08:52:30 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:30 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d010afc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x1, 0x20, 0x1f, 0x0, 0x6, 0x2, 0x7f, 0x5, 0x5f8facca}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x16082, 0x0) 08:52:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) r1 = semget$private(0x0, 0x0, 0x3ec) nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)) semtimedop(r1, &(0x7f00000001c0)=[{0x0, 0xbc0, 0x1800}, {0x0, 0x7, 0x1800}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000740)={0x4, &(0x7f0000000700)=[{0x7ff, 0x1}, {0x9}, {0x80, 0x7fff}, {0x7ff, 0x5}]}) semctl$GETALL(r1, 0x0, 0xd, 0x0) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f00000000c0)=""/109) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0xb0000) r4 = semget(0x1, 0x0, 0x20) semop(r4, &(0x7f0000000200)=[{0x2, 0x3, 0x1000}, {0x0, 0x200}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000780)={0x4, 0x3, 0x0, 0x80, 0x7, 0x7f, 0x20, 0x0, 0x0, 0x8, 0x3f, 0x40, 0xc1, 0x1f}, 0xe) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x220, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xd, "e214", 0x1}}, @common=@ah={{0x30, 'ah\x00'}, {[0x8], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x5, 0xb, [0xd, 0x6, 0x30, 0x8, 0x8, 0x14, 0x16, 0x38, 0x13, 0x1e, 0x3d, 0x0, 0x4, 0x2a, 0x32, 0x7], 0x1}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'bridge_slave_1\x00', {}, {}, 0x73, 0x2, 0x40}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x102, 0x800}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={[], 0x27}, 0x984d, 0x8, [0x6, 0x2c, 0x2a, 0x5, 0x1, 0xb, 0x7, 0x2c, 0x1d, 0x18, 0x8, 0x18, 0x26, 0x9, 0x17, 0x4], 0x2, 0x0, 0x9}}}, {{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x3, [0x1, 0x5, 0x4, 0x4, 0x6, 0x2], 0x4, 0x3}}}, @common=@inet=@set2={{0x28, 'set\x00'}, {{0xffffffffffffffff, 0x4, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0xea7ff7b26607e373, 0x6, 0x4, 0x0, 0x2], 0x3, 0x1}, {0x0, [0x4, 0xb, 0x4, 0x2], 0x3, 0x1}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000007c0)) 08:52:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) fadvise64(r0, 0x10000, 0x8, 0x2) fsmount(0xffffffffffffffff, 0x1, 0x8) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc340, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x3, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x40001, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x7}, [{0x2, 0x8}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0xd, 0xee00}, {0x8, 0x2}, {}, {0x8, 0x6}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x4}, {0x8, 0x7}, {0x8, 0x4}], {0x10, 0x1}, {0x20, 0x6}}, 0x7c, 0x3) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)={0xc0, 0x0, 0x0, [{{0x6, 0x0, 0x4, 0x8, 0x80, 0x3, {0x3, 0x6, 0x3, 0x1, 0x8, 0x5, 0x7, 0x401, 0x9, 0xc000, 0x6, 0xee01, 0x0, 0x7fff, 0x9}}, {0x0, 0x9, 0x13, 0x3, 'cgroup.controllers\x00'}}]}, 0xc0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000009c0)={0x0, 0xfffffffffffffff2, 0xfffffffffffffffd}) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1613.088446][ T3206] usb 6-1: USB disconnect, device number 8 08:52:30 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x81, 0xc}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a2f23a761ebdeced14a5cb17ecb300000003ac67ba9d36f2ea68e5606d85a97f3017f5cd99ddf743bc50e1904931d2546a3e6675d3353a48d38222833abdcd35a55654091826e41bd93cac64a2641ccae96e6586b3e0368f4ed2fbb2aa12cb3863bfbc0ca6e711d52f7e90938efd859286c3466db6100b334e3634b3dfdd4982671f0766f8b7", @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf250700000008000300", @ANYRES32=r1, @ANYBLOB="0800050000000000"], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x1eb382) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)={0x1, 0x7, 0x80, 0x0, 0x5, 0x40, 0x4, 0x6c, 0x0, 0x1, 0x9, 0x0, 0x0, 0x200, 0x806c, 0x8, 0xbd, 0x8, 0x8, [], 0x6, 0x40}) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x7fff, 0x4) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x8, 0x2, 0x1, 0x17, 0x0, 0x0}) [ 1613.193662][T19955] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1613.212038][T19957] vhci_hcd: invalid port number 0 [ 1613.261303][T19963] vhci_hcd: invalid port number 0 [ 1613.279131][T19955] device .1015 entered promiscuous mode 08:52:30 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2a6202, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ifreq(r1, 0x891e, &(0x7f00000000c0)={'veth0\x00', @ifru_settings={0x0, 0x0, @fr_pvc=&(0x7f0000000080)={0xb08d}}}) [ 1613.335631][T19970] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1613.430052][T19970] device .1016 entered promiscuous mode 08:52:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 08:52:30 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0123fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:30 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) getpgrp(r1) 08:52:30 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8001, 0x148) 08:52:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb83) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x2}) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x0, 0x17, 0x1, 0x400, 0x0, 0x1, 0x0}) [ 1613.661204][T19987] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1613.687049][T19987] device .1017 entered promiscuous mode 08:52:30 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) [ 1613.728810][T19991] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1613.790280][T19997] vhci_hcd: invalid port number 0 [ 1613.810289][T19991] device .1018 entered promiscuous mode [ 1613.827909][T19997] vhci_hcd: default hub control req: 0017 v0001 i0000 l0 [ 1613.901869][T20004] vhci_hcd: invalid port number 0 [ 1613.949998][T19997] vhci_hcd: default hub control req: 0017 v0001 i0000 l0 08:52:31 executing program 3: bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:31 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)) 08:52:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 08:52:31 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d012bfc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:31 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd6000fcdbdf25250000000800030057385d4b7b2a1db3648d5e712ed6d4dde5306cf5251f96094fea3c3f5867d065f10edea1e07399f548aaf93bc01461c56834277b5e811da13556c50dc15714b8", @ANYRES32=r3, @ANYBLOB="0c009900810000000c000000"], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={r7, 0x9, 0x4}, 0x8) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x5db8c28b3fa105b2}, 0x40804) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r3}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000140)) r9 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r9, 0x80085504, &(0x7f0000000080)) 08:52:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x6, 0x5, 0x9, 0x3, 0x1c9b}, 0x14) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1614.138085][T20015] vhci_hcd: invalid port number 0 08:52:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x0, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1614.158568][T20013] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1614.184597][T20019] vhci_hcd: invalid port number 0 [ 1614.248845][T20013] device .1019 entered promiscuous mode 08:52:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x5bd381) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000000)=0x4d) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x2c000) recvfrom$l2tp(r1, &(0x7f00000001c0)=""/230, 0xe6, 0x10000, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x20004015}, 0xc850) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x80, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000100)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 08:52:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair(0x1f, 0x6, 0x6, &(0x7f0000000100)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @remote, 0xffffffff}, 0x1c) [ 1614.304524][T20028] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000075, 0xe640) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x6, 0x9d, &(0x7f00000000c0)="4593e72d4b793a4a5abfaeaffbd718525f89c973c0d078b2cc2335a24495e70ea48f6657da836362cfea3baa56ebbd6b573db010929796de31c3cdbd0f48c8fa61f48de768072f8f9363f7c80e8b70dc27"}) 08:52:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x0, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1614.397863][T20028] device .1020 entered promiscuous mode 08:52:31 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d012dfc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) mq_unlink(&(0x7f0000000080)='%\x00') socket$bt_rfcomm(0x1f, 0x1, 0x3) 08:52:31 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x400, 0x74000) 08:52:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x5, 0x3, 0x2, 0x7, 0x0, 0xffffffff, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) socket$nl_audit(0x10, 0x3, 0x9) 08:52:31 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x0, 0x1}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1614.639336][T20047] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1614.723730][T20047] device .1021 entered promiscuous mode [ 1614.801411][T20061] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1614.880184][T20061] device .1022 entered promiscuous mode 08:52:32 executing program 1: rt_sigtimedwait(&(0x7f0000000080)={[0x5]}, &(0x7f00000000c0), &(0x7f0000000140), 0x8) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x400400) syz_extract_tcp_res(&(0x7f0000000000), 0x80, 0x5) 08:52:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0xc0001) 08:52:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x2, 0x80000001, 0xffffffff, 0x0, 0x7, 0x4, 0x40, 0x0, 0x5f, 0x8, 0x9, "52b27b81b70412da75307d0792e41e14f445edc092e3b000aee2ad725ce1f7d7"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x40101, 0x0) write$fb(r1, &(0x7f0000000340)="9e548b916860c2ea10a9144d74d750b4f2578a129f660c6b44125a1d9f11362b3ef2cec60beb0a0e230ae4563f7983ec49b9913ac72cf8db598b9d6875a29e5c3361d34f4b64c65676d1cc6ca7bebef7b30a2af6109eccf82eebdddacc24e22d095a6619a42008b7d3572f49963783ae4bc0410ecc5aab5accd5fdd37fc3b994064c3f57e377fe0f09f6b5b3843ecb273c3125581025df3df7f095a229bfba969d92b34e0d7a031e6e3c9236e49b60e118551824afc5975b97f967ebe588b6e882f0948b0f2898", 0xc7) r2 = fsmount(0xffffffffffffffff, 0x0, 0x71) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x71fce977e14b8b38, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMKID={0x14, 0x55, "4a7a9d17156bd97a1b844ad68de078ef"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "2a1c3decfe45bcd314bebbac51022b5d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4008080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000000100)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) 08:52:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000100)='Sb1!') ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0xf, "0d5ac1808267992811e7323d618f04"}, &(0x7f00000000c0)=0x33) 08:52:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9}, 0xfff, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:32 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0130fc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1615.085240][T20073] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9}, 0x0, 0x80, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:32 executing program 3: syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x202880) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) modify_ldt$write(0x1, &(0x7f0000000100)={0x6, 0x100000, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000000)={0x6, 0x9}) 08:52:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x7) 08:52:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f00000001c0)=0x2f) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', r4, 0x8000, 0x8020, 0x3, 0xff1, {{0x15, 0x4, 0x0, 0x2e, 0x54, 0x64, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@end, @timestamp={0x44, 0x8, 0xac, 0x0, 0x0, [0x2]}, @timestamp_prespec={0x44, 0x34, 0xa, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x1}, {@multicast1}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x588}]}]}}}}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000580)={r5, 0x1, 0x6, @local}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f00000000c0)="2128e1e870e4f2675b62fe12c3bf1166e4b3acee4afbc5b270f42ec61f053dedf143066c63d361b88ebbc348083e64645e223bcce388fb3cb77d8db221a8bb7b535c9ef1a29b0b928c7cd806a6c91137e7709a5c5fea8c9fdebb1ef8f05936603096614420e8ad36bf96411f19881147", &(0x7f0000000140)=""/95}, 0x20) [ 1615.179383][T20073] device .1023 entered promiscuous mode 08:52:32 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x581800, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)) [ 1615.250877][T20089] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1615.313239][T20097] vhci_hcd: invalid port number 0 [ 1615.327601][T20099] vhci_hcd: invalid port number 0 [ 1615.351763][T20089] device .1024 entered promiscuous mode 08:52:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9}, 0x0, 0x0, &(0x7f00000002c0)={0x60, 0x7, 0xfff, 0x12, 0x7}, 0x8, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1615.371392][T20099] vhci_hcd: invalid port number 0 [ 1615.376507][T20103] vhci_hcd: invalid port number 0 08:52:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="6f73df2c83136d5542e1ddd0c5d95eb2782e255b2f65cc"]) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x561001, 0x0) 08:52:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2000002, 0x68583) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:32 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d013bfc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) process_vm_readv(0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/170, 0xaa}, {&(0x7f0000001180)=""/127, 0x7f}, {&(0x7f0000001200)=""/73, 0x49}, {&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000001280)=""/128, 0x80}, {&(0x7f0000001300)=""/160, 0xa0}], 0x7, &(0x7f00000014c0)=[{&(0x7f0000001440)=""/46, 0x2e}, {&(0x7f0000001480)=""/64, 0x40}], 0x2, 0x0) 08:52:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400001, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x527a) dup2(r0, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000100)) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1615.619395][T20118] vhci_hcd: invalid port number 0 08:52:32 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9b7, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1615.639884][T20113] device .1025 entered promiscuous mode [ 1615.651082][T20118] vhci_hcd: invalid port number 0 08:52:32 executing program 3: mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x13, 0xffffffffffffffff, 0xc9000) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:32 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, &(0x7f00000000c0)={{@host, 0xec}, 0x1}) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x7fffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'batadv0\x00', {}, 0x675}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000200)={0x7c, ""/124}) [ 1615.714485][T20118] vhci_hcd: invalid port number 0 [ 1615.750184][T20126] vhci_hcd: invalid port number 0 [ 1615.750973][T20125] device .1026 entered promiscuous mode 08:52:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8808441}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:udev_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000001c0)={0xd, 0x4, 0x3ff, 0x84800, 0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb, 0x8010, r1, 0x250a0000) 08:52:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) 08:52:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080)=0xa8) 08:52:33 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d015afc60100012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x1401, 0x8, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f00000000c0)={0x8, [0x1, 0xffffe493, 0x100], [{0x9, 0x101, 0x1}, {0x1, 0x5, 0x0, 0x0, 0x1, 0x1}, {0xfffff001, 0x5}, {0x9, 0x9, 0x1, 0x0, 0x0, 0x1}, {0xc6, 0x6}, {0x0, 0x85c, 0x1, 0x0, 0x1}, {0x4, 0x5, 0x1, 0x1, 0x1}, {0x2, 0x6, 0x1}, {0x0, 0x80000000, 0x1}, {0xfffffc96, 0x800, 0x1, 0x0, 0x1}, {0x888, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x7, 0x1, 0x0, 0x1, 0x1}], 0x1}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0x2e181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="5514c4b643c34706debb877fdc5de12f0ed1696cfb43a12f88d6b3375304778c2833cbc7"}) [ 1616.074019][T20147] device .1027 entered promiscuous mode 08:52:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x8, 0x3f, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000084}, 0x840) write$P9_RLINK(r3, &(0x7f0000000300)={0x7, 0x47, 0x2}, 0x7) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x1f, 0x8, 0x4, 0x10001, 0xa, [{0x10000, 0x8, 0x3, [], 0x800}, {0xafb5, 0x80000001, 0x1, [], 0x1000}, {0x5, 0x9, 0xff, [], 0x3b02}, {0x3, 0x9, 0x3, [], 0x81}, {0x7, 0x7fffffff, 0x4, [], 0x900}, {0x1, 0x6, 0xfffffffffffffffb, [], 0x1109}, {0x9, 0xace, 0x7, [], 0x8}, {0x8, 0x0, 0x7fff, [], 0x502}, {0x0, 0x919d, 0x5, [], 0x89}, {0x2, 0x162f, 0x9, [], 0x601}]}) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x60183) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 1616.195046][T20155] device .1028 entered promiscuous mode [ 1616.227818][T20161] vhci_hcd: invalid port number 0 [ 1616.284043][T20163] vhci_hcd: invalid port number 0 08:52:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:52:33 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc60020012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000140)={'ip6gretap0\x00'}) 08:52:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)) 08:52:33 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x2c24c1) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r2 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4201, 0x4, 0x2}, 0x18) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000200)={0x3, 0x9, 0x6, 0x631e, 0x93, 0x3, &(0x7f0000000140)="f3a309de5c9368bf5b65dee8bf797b57cc3b5564fb29d2f70accb7ccf23026d6d3b915b1e5d3ad6b2bb4991804e7f2fbfffb61c094f1c57f0c8dabee8e2379be0321a3af4f1f08935d9cdf2cf1486a991425c8512b9a75fbc0c9fe1eba8cb011f7a109f2e1f6fd69fc4688fbf789b0ae74690a60b185da47e9c780fc92cce254f863abf192fee73a3a8d6093d74ab6b8e6fccd"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) gettid() ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0xffffffff}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) [ 1616.487399][T20171] device .1029 entered promiscuous mode 08:52:33 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x93, 0x9a, 0x12, 0x40, 0x47d, 0x5001, 0xa560, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7d, 0xbe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000100)={0xc, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x8, 0x48, {0x48, 0xb, "79175a1092e2f5ed27cc26392d9701953c5b619236b47272a6b4ad0f726319b4c29a8349eb7a32f44c3df43cce3496e199c73e2269bee683597bbbaf407eee8647f92e1a737f"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x0, 0x27, 0x39, "67a1b30a6755575a8a1ebc8a79d890f11b64de4fdff5a3ebbfded8a9f113723e3aa04425bc52cfd482e45c24706bbc279d0d6be65b4dcc7829"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfa}}) keyctl$assume_authority(0x10, 0x0) [ 1616.584744][T20182] vhci_hcd: invalid port number 0 [ 1616.622371][T20180] device .1030 entered promiscuous mode [ 1616.636892][T20185] vhci_hcd: invalid port number 0 08:52:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x80c00) 08:52:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000800006d, 0x802) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc60030012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000005c0)={0x28, 0x2, 0x0, {0x2, 0x9, 0x20}}, 0x28) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000010000073, 0x169181) ioctl$FITHAW(r2, 0xc0045878) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000000c0)={0x822f, 0x3, [{0x4}, {0x7}, {0x6}]}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000080)) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="91e43be089256d453d10d5c49330ce90222d7e093763aab0228450867b2bce7cca2881e2b00bd1bac611749f47908a92d9b0165fb5ecb13f0c7c78659d96092321fae45aec17bd9400d4a50cb66d446017ff5628be3d6170fd9e730f535d914e3ce2aabcda3505106a81214cf48728c93542ccb536e1bcb42353b0c31605a4a107a3de33f8c22a137c14b3ab7d71a1909c85eb1dc31b52276bea4b9d52203288546348395989b4ee22ad73b0932045fd1538d20d27071a6d06b96656ba9fafd5ea67a4f02e36d0639a1a833072ccb38544069e357ed15fe64853d1ba86847588445d06a2a623c78c1f518ddbc14a61521bee91bbb7cb81065a62e2b2", 0xfc}, {&(0x7f0000000200)="411e516da06af64538eff65e1d668c2f5930565bb28eb50810e243e3662ddc044fc7e47b92a24688f69a2d5cc3e4178fa48e645ba82e8e7ac989c0dc1702574b84a2ad4edd675da9252d2a9672e0639be29a2afe930a7b445f562e6d7c09ac951631124a1c4aee28ad0f5f55da53d76023ea2acb9c45ab8f6844c9bf482352a3afb683989a1c6ea002501e3553d3210c2a6529a25026ec3fbd8fbf92cb12435a93f93fafcb9acadc1b73c9128463f71b0f9bf270ff00146fff5771e0e2ee16315a60d02552d8f4baaa7072448a3833edfb7e7c7bb52fa53db09d736e0a6f10d3c2", 0xe1}, {&(0x7f0000000300)="52acda9dfc6c354134d658ae208823149be64859905cb8cf891361e098b236cb768c95c756e5ec306097934bf38b5d1e85d12c0a388be7de4cb628a93fc5b5", 0x3f}], 0x3, 0x1) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000380)={"8420d104d58fd5e9ae1b7806fa7110bc57eb9c9a05ea1a71b97e5f2cc6d5", 0x6, 0x1, 0x401, 0x0, 0x2f7, 0x8, 0x0, 0x5, [0x400, 0x3, 0x8, 0x100, 0x6610, 0x5, 0x800, 0x3, 0x4, 0x7, 0xffff, 0x8, 0x0, 0x3, 0x6, 0xfffffbff, 0x5, 0x8, 0x1]}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x8, 0x2, 0x2}, 0xc4e}}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7800, 0x80, 0x2632, 0x9, {{0x3e, 0x4, 0x3, 0x34, 0xf8, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @empty, {[@noop, @generic={0x86, 0xb, "3f27724c7240d5c021"}, @ssrr={0x89, 0x23, 0xa0, [@empty, @broadcast, @remote, @broadcast, @multicast2, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x1c, 0xa6, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@loopback, 0x81}]}, @lsrr={0x83, 0x13, 0x77, [@loopback, @dev={0xac, 0x14, 0x14, 0xa}, @remote, @rand_addr=0x64010101]}, @cipso={0x86, 0x43, 0x1, [{0x6, 0x7, "dd2b7b2fc7"}, {0x5, 0x3, '<'}, {0x1, 0xe, "e7b38d141029580816151568"}, {0x5, 0x6, "9a55bf1d"}, {0x1, 0xd, "f121773c6f16ba4381b94c"}, {0x7, 0x12, "3969135fa6c8cdaadf30bbed52e3f3fa"}]}, @lsrr={0x83, 0x13, 0x95, [@multicast1, @broadcast, @local, @broadcast]}, @cipso={0x86, 0x18, 0x0, [{0x0, 0x8, "e9dad4aa62e8"}, {0x2, 0xa, "8bcf25af6d5abc3e"}]}, @generic={0x88, 0xc, "7e89d0c92ffdc99594c0"}, @ssrr={0x89, 0xb, 0xe9, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 08:52:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@util={0x25, "f00654192af172eae71f448672bebac0"}, 0x18) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000000c0)={0x800, 0xffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x24400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x0, 0x15, &(0x7f0000000140)='/dev/bus/usb/00#/00#\x00'}, 0x30) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xffff, 0x40) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 08:52:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000076, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) kcmp(0xffffffffffffffff, 0x0, 0x1, r0, r1) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1617.045070][ T5406] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1617.052873][T20201] device .1031 entered promiscuous mode [ 1617.130664][T20211] vhci_hcd: invalid port number 0 [ 1617.133035][T20206] device .1032 entered promiscuous mode [ 1617.172616][T20215] vhci_hcd: invalid port number 0 08:52:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x100000) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f00000000c0)) 08:52:34 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x101}) 08:52:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/sco\x00') ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r3, 0x458a}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r3}, &(0x7f00000000c0)=0xfffffffffffffcb9) [ 1617.379292][T20220] vhci_hcd: invalid port number 0 08:52:34 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc60040012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1617.425326][ T5406] usb 5-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1617.450825][ T5406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.494677][T20226] vhci_hcd: invalid port number 0 [ 1617.523002][ T5406] usb 5-1: config 0 descriptor?? [ 1617.557009][T20226] vhci_hcd: invalid port number 0 [ 1617.605831][T20227] device .1033 entered promiscuous mode [ 1617.607482][ T5406] gspca_main: se401-2.14.0 probing 047d:5001 [ 1617.712076][T20235] device .1034 entered promiscuous mode [ 1618.085328][ T5406] gspca_se401: Wrong descriptor type 08:52:36 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r1, 0x0, r2, 0x0, 0x10000, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x93, 0x9a, 0x12, 0x40, 0x47d, 0x5001, 0xa560, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x7d, 0xbe}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000100)={0xc, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x8, 0x48, {0x48, 0xb, "79175a1092e2f5ed27cc26392d9701953c5b619236b47272a6b4ad0f726319b4c29a8349eb7a32f44c3df43cce3496e199c73e2269bee683597bbbaf407eee8647f92e1a737f"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x0, 0x27, 0x39, "67a1b30a6755575a8a1ebc8a79d890f11b64de4fdff5a3ebbfded8a9f113723e3aa04425bc52cfd482e45c24706bbc279d0d6be65b4dcc7829"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfa}}) keyctl$assume_authority(0x10, 0x0) 08:52:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x6681c1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "e9006a03ef1bc49c", "90b1a95a2475c562de9ce258b4375af1", "4ae38175", "b94d0cb42627f0a5"}, 0x28) r3 = fcntl$dupfd(r0, 0x406, r0) sendto$inet6(r3, &(0x7f0000000180)="8ea731f65048ec63ee36d3ef05718e65dc4c83fa93c47fd0701b1098f886d64b51ae4bcc14d46b481ef4411b24e10ac5c0f3518a8a6cb72cce2a7dcff4bc16d19eb96841850ad401c883ba0eac7fcc329e503897e0b34e07bdc69b3979e1f290d65bc5e5253fa28f20a3a1", 0x6b, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x40f7f3, @mcast2, 0x781432fe}, 0x1c) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000000)={0x800, 0x6}) write$P9_RUNLINKAT(r3, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) 08:52:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x1, 0x7fff, &(0x7f00000000c0)="1abac116eec25cb93dec6071283a8ee6e9fc2180836ea250d9bd2c07bf26b87ebc065fa5d375c5500d25cd64e79341cf72cd93a31de9643fca3b9ded474829141df4c36619b4f26413c211c8c9c44470d83066436a65467f2b3143cc6a0325d3d27a818be7598259c5f67f698b523a76922579acb6dad76728ecc043e73335bb3cd1e6371be347fde187895f7787404fb2cdc99dda036a3516efc20113b7fae5b9b6ba86c33cba349595384e9a05aa4bd69081d75165cb4dd100d1d01ce52f514bf35e4dfc11cf3bd32693daf1ce99c3fe449484c13fb1265b14783037e5b4f6613ef98f"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000077, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:36 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc60050012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0xfc, 0x80, 0x0, 0x13, 0x0, 0x4, 0x16, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x14, 0x1, @perf_config_ext={0x80000001, 0x9}, 0x10c00, 0x7, 0x4, 0x7, 0x3, 0x80, 0x8}, 0x0, 0x8, r1, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000280)={"391f56ac78fa25dc87d02ae07875b7cb", r3, 0x0, {0x7, 0xbd}, {0x80000000, 0x3c27d352}, 0x100000001, [0x3, 0x0, 0x9, 0x7, 0x7, 0x3f, 0x5, 0x1, 0x6, 0x639ed29d, 0x8, 0x1f, 0x2598, 0x3, 0x81, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001000)={{r0}, r3, 0xa, @unused=[0x1f, 0x7, 0xb0b], @devid}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) read$char_raw(r0, &(0x7f0000000200)={""/3482}, 0xe00) [ 1619.722891][ T7] usb 5-1: USB disconnect, device number 5 [ 1619.837973][T20254] validate_nla: 10 callbacks suppressed [ 1619.838001][T20254] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:37 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:37 executing program 1: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x990000, 0x6, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9b0901, 0x10001, [], @value=0x3}}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x7b5302) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000000)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000080)=@ll={0x11, 0xf5, r6, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000100)}, 0x4000000) 08:52:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1620.001748][T20254] device .1035 entered promiscuous mode 08:52:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000041031ba94d433b787f5d1de934d991c422eef01a740e9db1f9d097b4437c78b43bcf2926eeeaf098ca215548da825b5492c9f4f2b73c2ebaf1b2", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf250f0000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000140)={0x2, &(0x7f00000000c0)="b25d800e8e4e46023fc4ad83c81854553d99673b78fda8692fd7492a2cd44aedf412dac5e6b1c6bd952dca2834f3c8bd5796fb4c1bd741f95d2ee2d2d1476ef4f9be819724e3eb694406a90dd8d991efbe3de16abaf45ffff1821bbe5ba3ec062a08014aff07642014a8e88e3b850b"}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x2a00, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000002c0)) [ 1620.114011][T20274] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:37 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68121) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x6, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x55) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0x97ce) gettid() [ 1620.177137][T20274] device .1036 entered promiscuous mode [ 1620.234792][ T3877] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1620.312488][T20285] vhci_hcd: invalid port number 0 [ 1620.326421][T20286] vhci_hcd: invalid port number 0 [ 1620.365744][T20289] vhci_hcd: invalid port number 0 [ 1620.370838][T20290] vhci_hcd: invalid port number 0 [ 1620.655133][ T3877] usb 5-1: New USB device found, idVendor=047d, idProduct=5001, bcdDevice=a5.60 [ 1620.664425][ T3877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.676789][ T3877] usb 5-1: config 0 descriptor?? [ 1620.717600][ T3877] gspca_main: se401-2.14.0 probing 047d:5001 [ 1621.184972][ T3877] gspca_se401: Wrong descriptor type 08:52:40 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x8000, 0x8000005, 0x7fffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socket$inet(0x10, 0x2000000003, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='syq\xf6\xfb\x9c\xcd\xbb\xedH\x8e\xa8E\xd5', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x110) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) dup3(r0, r1, 0x0) dup2(r2, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000180)={0x0, 0x1, 0x10}) r5 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 08:52:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)) 08:52:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000180)={0x1, 0x0, 0x3, 0x4, {0x1, 0x1, 0x9, 0x3e3}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000300)={0x0, 0xffff, 0x550}, 0x8) r2 = dup(r1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_S_MODULATOR(r4, 0x40445637, &(0x7f0000000280)={0x20000, "e4ddfd1ac9580a16876cbdd2f91ecc0a821607e5446467d9dd165284fdbf2c5b", 0x20, 0xb0d, 0x3ff, 0x4, 0x5}) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000340)=[{0x3, 0x3, {0x1, 0xf0}, {0x0, 0x0, 0x3}, 0x0, 0xff}], 0x20) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x410500, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$CHAR_RAW_HDIO_GETGEO(r2, 0x301, &(0x7f0000000240)) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) 08:52:40 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc60060012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0xc) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:40 executing program 1: getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4c004) [ 1622.850820][ T3206] usb 5-1: USB disconnect, device number 6 [ 1622.968794][T20310] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) 08:52:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000000c0)={0x81, "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"}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200), 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x1, 0xff}) 08:52:40 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r0 = syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x3, 0x8000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x0, 0xb, 0xfffc, 0x3, 0x8f, 0x8, &(0x7f0000000180)="86cc56899d513bcba0091b9d846d9ef6269f49b4ec96c89bd220c54e409727f51336816336d6b1d93a6c5ad6d07a1435573b741a7f596c89458c139f9aa2fc435b7082c5615d030a1bab750864930699dd92ce478a2b780be6e08de927854d87213d6d59e9a51bef618150da2793ff4a94f94e682b79790deb17d462fd6787361c760484e70d22fdc65caf85db4aa6"}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@dellink={0x60, 0x11, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x11, 0x20001}, [@IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_PHYS_PORT_ID={0xe, 0x22, "4b1bd09c84a1d17b24aa"}, @IFLA_LINK_NETNSID={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x1010}, 0x1) r7 = dup(r2) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000080)) [ 1623.057580][T20310] device .1037 entered promiscuous mode 08:52:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) r1 = dup3(r0, r0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x60, 0xa, 0x2, 0x1, 0x0, 0x0, 0x0}) [ 1623.146700][T20323] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1623.243847][T20323] device .1038 entered promiscuous mode 08:52:40 executing program 3: r0 = gettid() write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020806f06000000459f00000000000092290a7e4555a763c15ccda085e2da58f729fa6669d7b0ec89b551c676ed3ae7a290ab0e74467713d41832ee9d99ba46c604a8bf8893cc7149595314f0717d52bc1f70e7c3559b6cfa0648fedbfe969160f4375dfa5234feeff8e55faea378c617c7f8101acfab124e2ecc2d941d6a6876909a3ff46220c872"], 0x80) lchown(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$pokeuser(0x6, 0x0, 0x0, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) readv(r1, &(0x7f0000000940), 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x40040, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(r2, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x40}, 0x8) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) 08:52:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x8, 0x8, 0x2, 0x0, 0x0, 0x8000, 0x28142, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x5, 0x20}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x22a702) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x12, 0x8d, &(0x7f0000000200)="7faf24d1cd0c5ec3640a9dce918b9994135b0a97150f9c611c43833b14f441a4cd97b6bcbf58a18b29f4f2b8d52f9d8d9e6c9c556e0a2917271750e836ba49e97a6aa72db29e8fa4a62a75ce776e97c49857cd4e733e5adca39a00b95d2c8eb13a6a849a15995217cef8e09e60dad7892a710ef47329a7e56f8df69a458f29f5c5e2000c2064c1f3652d0babb1"}) bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x3f, 0x6, 0x9, 0x6}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x1, 0x10, 0x80, 0x3, {{0x46, 0x4, 0x1, 0x10, 0x118, 0x68, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @multicast1, {[@end, @lsrr={0x83, 0x23, 0x6f, [@multicast1, @multicast2, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010100, @empty, @broadcast, @multicast2]}, @rr={0x7, 0x17, 0x9c, [@remote, @local, @empty, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x25, [@dev={0xac, 0x14, 0x14, 0x12}]}, @noop, @end, @timestamp={0x44, 0x24, 0xe7, 0x0, 0x2, [0x7, 0x5, 0x6, 0x10000, 0xfffffe00, 0x10000, 0x2, 0x3]}, @rr={0x7, 0x23, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}]}, @cipso={0x86, 0x73, 0x2, [{0x7, 0x9, "1acca0627a3535"}, {0x6, 0x12, "eb68617ddbd4c5af705746ba208021d9"}, {0x7, 0xa, "284490afaa395a43"}, {0x2, 0xf, "c0c57faac4b0142381639a335b"}, {0x1, 0xc, "27f9f49cbbb63ed631bd"}, {0x7, 0x11, "9bc4df2b31f4c05b410a1a661b55fe"}, {0x5, 0x5, "76a5c0"}, {0x1, 0x11, "8903bec40a475f06e55353c659986f"}, {0x6, 0x3, '_'}, {0x1, 0x3, '\''}]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)={0xe0, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2000c008}, 0x48000) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f00000000c0)) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4401}, 0x1) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000880)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c00639c9c22007db7a44dce2000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf25150000000a000600ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a00060008021100000000000a00060008021100000000000a00060008021100000000000a000600ffffffffffff0000"], 0x8c}, 0x1, 0x0, 0x0, 0x44884}, 0x2000400c) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002840)='/dev/dlm_plock\x00', 0x92900, 0x0) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x5c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 08:52:40 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x8000, 0x8000005, 0x7fffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socket$inet(0x10, 0x2000000003, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='syq\xf6\xfb\x9c\xcd\xbb\xedH\x8e\xa8E\xd5', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(0x0, 0x110) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) dup3(r0, r1, 0x0) dup2(r2, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000180)={0x0, 0x1, 0x10}) r5 = socket$xdp(0x2c, 0x3, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 08:52:40 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc60070012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = msgget$private(0x0, 0x224) msgctl$IPC_RMID(r1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xfffffffffffff791, 0x2d2202) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x19, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) [ 1623.557726][T20349] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1623.680960][T20349] device .1039 entered promiscuous mode 08:52:40 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000000008, 0x12bb82) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = signalfd4(r0, &(0x7f0000000100)={[0x800]}, 0x8, 0x80800) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r2 = dup(r0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) pause() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000240)={0x8, 'veth0_virt_wifi\x00', {'ip6gretap0\x00'}, 0x8000}) r6 = openat$cgroup_ro(r5, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000400), &(0x7f0000000440)=0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc044) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000200)={&(0x7f00000001c0)=""/43, 0x2b, 0x5, 0x101}) 08:52:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x400000011, 0x1631c1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) [ 1623.782900][T20366] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1623.875405][T20366] device .1040 entered promiscuous mode 08:52:41 executing program 4: r0 = gettid() write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c653020806f06000000459f00000000000092290a7e4555a763c15ccda085e2da58f729fa6669d7b0ec89b551c676ed3ae7a290ab0e74467713d41832ee9d99ba46c604a8bf8893cc7149595314f0717d52bc1f70e7c3559b6cfa0648fedbfe969160f4375dfa5234feeff8e55faea378c617c7f8101acfab124e2ecc2d941d6a6876909a3ff46220c872"], 0x80) lchown(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$pokeuser(0x6, 0x0, 0x0, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) readv(r1, &(0x7f0000000940), 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x40040, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(r2, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x40}, 0x8) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) 08:52:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) mknod$loop(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="1a1e340410dd4ee213182cfe5fd13e52aad8000000", @ANYRES16=r4, @ANYBLOB="3f0d00000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="10005e80080002000000000004000100"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x1c014}, 0x800) 08:52:41 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc60080012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) [ 1624.111452][T20383] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1624.196380][T20383] device .1041 entered promiscuous mode 08:52:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000080)) [ 1624.263770][T20387] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1624.358128][T20387] device .1042 entered promiscuous mode 08:52:41 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc60090012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:41 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000100)=0x14) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x900, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/timer\x00', 0x4000) splice(r3, &(0x7f0000000500)=0x4, r0, &(0x7f0000000540)=0x6, 0x1dd, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f00000000c0)=0xaa70, 0x4) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1624.622269][T20399] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1624.670263][T20399] device .1043 entered promiscuous mode 08:52:41 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4c002, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xb01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0105502, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1624.713906][T20403] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1624.777654][T20403] device .1044 entered promiscuous mode 08:52:42 executing program 5: syz_extract_tcp_res(&(0x7f0000000000), 0xb3cf, 0x100) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x2, 0x8004, 0x0, 0x0, 0x0}) 08:52:42 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc600a0012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)={0x7, 0x3}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYBLOB="c100c99c8dc52bbd70002e40c2d16b00000c080002149ae1b57c95a5296b00000080000000007ec3127c0101000050ddfd000000", @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b8640680e3571ef9f074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f836eaf0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f99e7b7ea5a4df5dfe03e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d94dd27b749364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c63b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e1515b9853f73052c3a841cfcb0c79e8435815001812b872"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) r8 = signalfd4(r1, &(0x7f0000001440)={[0x2]}, 0x8, 0x80800) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x1, 0x11, r8, 0x82000000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESDEC=r5], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c014) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001e00)={r5, "62e6e4597585f07da4539653e49d9e6c"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{r2}, 0x0, 0x10, @inherit={0x60, &(0x7f0000001480)=ANY=[@ANYBLOB="0100000000000000030000005f5b2260301adece9cd600000000090000000000000009000000000000003700000000000000ff070000000000000500000000000000ff0300000000000000000000000000007f0000000000000087690000000000000a0b000000000000"]}, @devid=r5}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000080)={0x2, 0x2, {0x4, @struct={0x5, 0x8}, r5, 0x2, 0x7, 0x6, 0x7fffffff, 0x5, 0x48c, @usage=0x2, 0x1f, 0xfff, [0x8, 0x0, 0x1c, 0x4cd, 0x0, 0x2]}, {0x1832cbfd, @struct={0x0, 0x5}, 0x0, 0x7f, 0x7, 0x3, 0xff, 0x3, 0x0, @struct={0x2, 0x9}, 0x33b, 0x5, [0x10001, 0x3, 0xffff, 0x4, 0x1, 0xbe]}, {0x6, @usage=0x200, 0x0, 0x4, 0x7fffffff, 0x62c2, 0x3, 0x8, 0x0, @usage, 0x2, 0x4, [0xffffffffffffffc0, 0x408, 0x7fff, 0x0, 0x0, 0x2]}, {0x0, 0x1ff, 0x1ff}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000000c0)={r5, "8603fa46632ef01f1353fb0020e30f01"}) 08:52:42 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4c002, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xb01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0105502, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1625.041645][T20416] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1625.048197][T20419] vhci_hcd: invalid port number 0 08:52:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002072, 0x523382) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1625.187152][T20416] device .1045 entered promiscuous mode 08:52:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYRESHEX, @ANYRES16=r4, @ANYBLOB="c100c99c8dc52bbd70002e40c2d16b00000c080002149ae1b57c95a5296b00000080000000007ec3127c0101000050ddfd000000", @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b8640680e3571ef9f074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f836eaf0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f99e7b7ea5a4df5dfe03e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d94dd27b749364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c63b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e1515b9853f73052c3a841cfcb0c79e8435815001812b872"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRESDEC=r2], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c014) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3a0, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21fb9842}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33f1fe82}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d80e5e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7af49571}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ea782cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x662291d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b087a4b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xce1bc23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cbca0d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7219e1ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4333e89a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6115}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdf88bf6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcfb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa407}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5577f8c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b4d7aff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39092b77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4617fc5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74f7d47f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2967}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb018}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b19}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x144, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd14c39e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aafef91}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b203187}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e24992e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ee2d2f6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x324428d1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dc7aa77}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a760fe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x321fc499}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19cb5af9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b8afce3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a700f2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x291c7bef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63ac35bc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21895173}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x100, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46a57df4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x631ec7ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1373c104}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa5b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x408a09e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8bfc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x787d6adf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7895e9f8}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cafb3aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5709}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5311}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x996f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x17e9}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69e7b592}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3918d9bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38e7c51c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x315047c4}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c15c178}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccdb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb1ac}]}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x8010}, 0x1) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:42 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4c002, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xb01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0105502, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1625.253821][T20426] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf25010000000c009900010057176e040000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8001) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xe9}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e20, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000000}}}, 0x84) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000000)={0x2, {0xff, 0x80000000, 0x3ff, 0xe9}}) keyctl$clear(0x7, 0xffffffffffffffff) 08:52:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1625.352299][T20426] device .1046 entered promiscuous mode 08:52:42 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc600b0012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) 08:52:42 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4c002, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xb01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0105502, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000001c0)=0x3) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xb, "e8ff540af100"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x101) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x35}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000140)={0x40, 0x41, "6a0fca738fdb3613b4fa75fa50ea0fd24e14861a21cb73b8d5ea3ebba83a37d6a7436748b4fd80c10b52309fdb2ad84f7d92dc49f565e8ba2aec631ce8e6b92cae"}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000280)={0x9}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000080)={0x0, 0x7}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r6 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000100)={0x58, 0x33, 0x6, 0x8}) 08:52:42 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x13b381) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1625.625992][T20441] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:42 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xffffffff, 0xa242) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@host, 0x1f}, @host, 0xe, 0x5, 0x4, 0x0, 0xbee, 0x6, 0x2}) r1 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200000f170, 0x0) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000080)) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000040)={0x6518, 0x1}) 08:52:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x1b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, r6, 0xd3f, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x39}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x1) r7 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r7, 0x10, &(0x7f0000000280)) [ 1625.719369][T20441] device .1047 entered promiscuous mode 08:52:42 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4c002, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xb01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0105502, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1625.777087][T20453] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:43 executing program 2: set_tid_address(&(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x4) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xe844}, 0x800) [ 1625.827634][T20453] device .1048 entered promiscuous mode [ 1625.859936][T20454] vhci_hcd: invalid port number 0 08:52:43 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x8010, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x8001}, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={'veth1_to_team\x00', {0x2, 0x0, @remote}}) [ 1625.913962][T20454] vhci_hcd: invalid port number 0 08:52:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x26c783) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000000)=0xfffffffe) 08:52:43 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000036000511d25a80648c63940d0135fc600c0012400c0002000200000037153e370a0001802e256400d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x1de1e}, 0x0) 08:52:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000011) 08:52:43 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4c002, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xb01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0105502, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:43 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x280000, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) [ 1626.111576][T20473] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 08:52:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = dup(0xffffffffffffffff) clone(0x80002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000180)={0xe79}) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) r5 = gettid() ptrace(0x10, r5) sched_setscheduler(r5, 0x0, &(0x7f0000000000)=0x5e2) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000080)) 08:52:43 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x5, 0x40, &(0x7f00000000c0)="757ba6ba466a468249ad6ddb0ec5c81e2d0df4c263d244e38eec4456fd3acfec8473e62f79c67ddb03dc55e3f0ea092b3c67d134811c2e1e606c8af15bed69139de1a4370be5e889a98183588f419bbdc22b701cc7ce83086339c620f5d7e796bee85a281b140d7e46f19cc11605b648a162b7f7e98ec901458ac5ad780f24dba93172e9f15d7d9f468039cf32630803d598049ccbbb9b8349fd68208a254c27cce5aa74fdcd16ac1b35fa70685a49c9f52780b5d998ea29c32fed763d67ad8c43c10a0c3289144e9d131143b436d53337083cc82c13e582d2e28e40", 0xdc, 0x1000, 0x7, 0x0, 0x2, 0xc7d, &(0x7f0000000000)="32c75017b85c"}) r1 = dup3(r0, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x68181) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000280)={0x40000000, 0x2, "32a7223ec319fb09f984982552a0474edde2fb8e93978ae04700659d4e30ad7f", 0x9, 0x10000, 0x3, 0x67724492, 0x5, 0x3, 0x769, 0x5, [0x8, 0x3, 0x80000000, 0x1000]}) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000240)={{{0xa, 0x1}}, 0x195, 0x0, &(0x7f0000000400)="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"}) 08:52:43 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4c002, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0xb01) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) 08:52:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000001c0)={0x1, 0x37, 0x4, 0x1f, 0x2, 0x5, 0x3, 0xdb, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000180), &(0x7f0000000200)=0xc) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00050f000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008040a00", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_getneigh={0x28, 0x1e, 0xf05, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbf1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x9) [ 1626.222794][T20473] device .1049 entered promiscuous mode [ 1626.287921][T20484] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1626.350857][T20490] vhci_hcd: invalid port number 0 [ 1626.377015][T20484] device .1050 entered promiscuous mode [ 1626.394077][T20490] vhci_hcd: invalid port number 0 [ 1626.417814][T20496] ================================================================================ [ 1626.427853][T20496] UBSAN: shift-out-of-bounds in drivers/usb/gadget/udc/dummy_hcd.c:2293:33 [ 1626.436490][T20496] shift exponent 255 is too large for 32-bit type 'int' [ 1626.443460][T20496] CPU: 0 PID: 20496 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 1626.451950][T20496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.462398][T20496] Call Trace: 08:52:43 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x4c002, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1626.465711][T20496] dump_stack+0x107/0x163 [ 1626.470101][T20496] ubsan_epilogue+0xb/0x5a [ 1626.474560][T20496] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 1626.481378][T20496] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 1626.486821][T20496] dummy_hub_control.cold+0x1a/0xbc [ 1626.492087][T20496] usb_hcd_submit_urb+0xcaa/0x22d0 [ 1626.497709][T20496] ? dummy_bus_resume+0x260/0x260 [ 1626.502866][T20496] ? usb_add_hcd+0x2c0/0x2c0 [ 1626.507507][T20496] ? kasan_save_stack+0x32/0x40 [ 1626.512576][T20496] ? kasan_save_stack+0x1b/0x40 [ 1626.517574][T20496] ? ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 1626.524344][T20496] ? usb_alloc_urb+0x65/0xb0 [ 1626.528986][T20496] ? usb_control_msg+0x1c9/0x4a0 [ 1626.534493][T20496] ? do_proc_control+0x4cb/0x9c0 [ 1626.539468][T20496] ? usbdev_ioctl+0x12c1/0x3b20 [ 1626.544614][T20496] ? __x64_sys_ioctl+0x193/0x200 [ 1626.549852][T20496] ? do_syscall_64+0x2d/0x70 [ 1626.554479][T20496] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1626.560591][T20496] ? lockdep_hardirqs_on_prepare+0x420/0x420 08:52:43 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1626.566616][T20496] ? do_syscall_64+0x2d/0x70 [ 1626.571248][T20496] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1626.577355][T20496] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 1626.583214][T20496] usb_submit_urb+0x6e4/0x1560 [ 1626.588034][T20496] ? lockdep_init_map_waits+0x250/0x720 [ 1626.593714][T20496] usb_start_wait_urb+0x101/0x4c0 [ 1626.598783][T20496] ? usb_api_blocking_completion+0xa0/0xa0 [ 1626.604644][T20496] ? unpoison_range+0x3a/0x60 [ 1626.609373][T20496] ? memset+0x20/0x40 [ 1626.613408][T20496] usb_control_msg+0x31c/0x4a0 08:52:43 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1626.618222][T20496] ? usb_start_wait_urb+0x4c0/0x4c0 [ 1626.623470][T20496] ? wait_for_completion_io+0x260/0x260 [ 1626.629070][T20496] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1626.635365][T20496] ? snoop_urb+0x64/0x130 [ 1626.641487][T20496] do_proc_control+0x4cb/0x9c0 [ 1626.646298][T20496] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1626.653025][T20496] usbdev_ioctl+0x12c1/0x3b20 [ 1626.657772][T20496] ? processcompl_compat+0x680/0x680 [ 1626.663117][T20496] ? __sanitizer_cov_trace_switch+0x63/0xf0 08:52:43 executing program 4: r0 = syz_open_dev$usbfs(0x0, 0x4000000000002074, 0x12bb82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0}) [ 1626.669232][T20496] ? do_vfs_ioctl+0x27d/0x1090 [ 1626.674041][T20496] ? generic_block_fiemap+0x60/0x60 [ 1626.679540][T20496] ? lock_downgrade+0x6d0/0x6d0 [ 1626.684433][T20496] ? _copy_to_user+0xdc/0x150 [ 1626.689157][T20496] ? __fget_files+0x2e3/0x430 [ 1626.694141][T20496] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1626.700421][T20496] ? processcompl_compat+0x680/0x680 [ 1626.705750][T20496] __x64_sys_ioctl+0x193/0x200 [ 1626.710558][T20496] do_syscall_64+0x2d/0x70 [ 1626.715022][T20496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1626.720957][T20496] RIP: 0033:0x45e149 [ 1626.724875][T20496] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1626.744512][T20496] RSP: 002b:00007fa083019c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1626.752963][T20496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 1626.761675][T20496] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1626.769678][T20496] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1626.777681][T20496] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1626.778953][T20507] vhci_hcd: invalid port number 0 [ 1626.785674][T20496] R13: 00000000016afb7f R14: 00007fa08301a9c0 R15: 000000000119bf8c [ 1626.804082][T20496] ================================================================================ [ 1626.814256][T20496] Kernel panic - not syncing: panic_on_warn set ... [ 1626.820862][T20496] CPU: 0 PID: 20496 Comm: syz-executor.5 Not tainted 5.10.0-syzkaller #0 [ 1626.829326][T20496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1626.839436][T20496] Call Trace: [ 1626.844021][T20496] dump_stack+0x107/0x163 [ 1626.848436][T20496] panic+0x343/0x77f [ 1626.852358][T20496] ? __warn_printk+0xf3/0xf3 [ 1626.858528][T20496] ? ubsan_epilogue+0x3e/0x5a [ 1626.863255][T20496] ubsan_epilogue+0x54/0x5a [ 1626.867785][T20496] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 1626.874586][T20496] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 1626.880026][T20496] dummy_hub_control.cold+0x1a/0xbc [ 1626.885280][T20496] usb_hcd_submit_urb+0xcaa/0x22d0 [ 1626.890722][T20496] ? dummy_bus_resume+0x260/0x260 [ 1626.895778][T20496] ? usb_add_hcd+0x2c0/0x2c0 [ 1626.901033][T20496] ? kasan_save_stack+0x32/0x40 [ 1626.905907][T20496] ? kasan_save_stack+0x1b/0x40 [ 1626.910783][T20496] ? ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 1626.916965][T20496] ? usb_alloc_urb+0x65/0xb0 [ 1626.921581][T20496] ? usb_control_msg+0x1c9/0x4a0 [ 1626.926552][T20496] ? do_proc_control+0x4cb/0x9c0 [ 1626.931522][T20496] ? usbdev_ioctl+0x12c1/0x3b20 [ 1626.936405][T20496] ? __x64_sys_ioctl+0x193/0x200 [ 1626.941380][T20496] ? do_syscall_64+0x2d/0x70 [ 1626.946783][T20496] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1626.952888][T20496] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 1626.958994][T20496] ? do_syscall_64+0x2d/0x70 [ 1626.963620][T20496] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1626.970238][T20496] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 1626.977619][T20496] usb_submit_urb+0x6e4/0x1560 [ 1626.982442][T20496] ? lockdep_init_map_waits+0x250/0x720 [ 1626.988063][T20496] usb_start_wait_urb+0x101/0x4c0 [ 1626.994335][T20496] ? usb_api_blocking_completion+0xa0/0xa0 [ 1627.000186][T20496] ? unpoison_range+0x3a/0x60 [ 1627.004899][T20496] ? memset+0x20/0x40 [ 1627.008919][T20496] usb_control_msg+0x31c/0x4a0 [ 1627.013809][T20496] ? usb_start_wait_urb+0x4c0/0x4c0 [ 1627.019035][T20496] ? wait_for_completion_io+0x260/0x260 [ 1627.024617][T20496] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1627.030907][T20496] ? snoop_urb+0x64/0x130 [ 1627.035271][T20496] do_proc_control+0x4cb/0x9c0 [ 1627.040066][T20496] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1627.047175][T20496] usbdev_ioctl+0x12c1/0x3b20 [ 1627.051970][T20496] ? processcompl_compat+0x680/0x680 [ 1627.057296][T20496] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1627.063421][T20496] ? do_vfs_ioctl+0x27d/0x1090 [ 1627.068693][T20496] ? generic_block_fiemap+0x60/0x60 [ 1627.073969][T20496] ? lock_downgrade+0x6d0/0x6d0 [ 1627.078850][T20496] ? _copy_to_user+0xdc/0x150 [ 1627.083745][T20496] ? __fget_files+0x2e3/0x430 [ 1627.091418][T20496] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1627.098359][T20496] ? processcompl_compat+0x680/0x680 [ 1627.104972][T20496] __x64_sys_ioctl+0x193/0x200 [ 1627.109810][T20496] do_syscall_64+0x2d/0x70 [ 1627.114293][T20496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1627.121492][T20496] RIP: 0033:0x45e149 [ 1627.125889][T20496] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1627.146043][T20496] RSP: 002b:00007fa083019c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1627.155066][T20496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 1627.164075][T20496] RDX: 0000000020000080 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1627.172905][T20496] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.182552][T20496] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 1627.191592][T20496] R13: 00000000016afb7f R14: 00007fa08301a9c0 R15: 000000000119bf8c [ 1627.201764][T20496] Kernel Offset: disabled [ 1627.206437][T20496] Rebooting in 86400 seconds..